This is the start of the stable review cycle for the 6.1.175 release. There are 969 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Mon, 01 Jun 2026 16:01:39 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.175-rc1... or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y and the diffstat can be found below.

thanks,

greg k-h

------------- Pseudo-Shortlog of commits:

Greg Kroah-Hartman gregkh@linuxfoundation.org Linux 6.1.175-rc1

Linus Torvalds torvalds@linux-foundation.org security/keys: fix missed RCU read section on lookup

Aditya Garg gargaditya@linux.microsoft.com net: mana: validate rx_req_idx to prevent out-of-bounds array access

Bartosz Golaszewski bartosz.golaszewski@oss.qualcomm.com gpio: cdev: check if uAPI v2 config attributes are correctly zeroed

Andy Shevchenko andy.shevchenko@gmail.com gpiolib: cdev: use !mem_is_zero() instead of memchr_inv(s, 0, n)

Jani Nikula jani.nikula@intel.com string: add mem_is_zero() helper to check if memory area is all zeros

Rosen Penev rosenp@gmail.com net: ag71xx: check error for platform_get_irq

David Carlier devnexen@gmail.com tracing: Avoid NULL return from hist_field_name() on truncation

Ido Schimmel idosch@nvidia.com bridge: mcast: Fix a possible use-after-free when removing a bridge port

Petr Machata petrm@nvidia.com net: bridge: Flush multicast groups when snooping is disabled

Guangshuo Li lgs201920130244@gmail.com RDMA/rtrs: Fix use-after-free in path file creation cleanup

Rafael J. Wysocki rafael.j.wysocki@intel.com platform/x86: intel-vbtn: Check ACPI_HANDLE() against NULL

Rafael J. Wysocki rafael.j.wysocki@intel.com platform/x86: intel-hid: Check ACPI_HANDLE() against NULL

Rafael J. Wysocki rafael.j.wysocki@intel.com platform/x86: hp_accel: Check ACPI_COMPANION() against NULL

Rafael J. Wysocki rafael.j.wysocki@intel.com platform/x86: adv_swbutton: Check ACPI_HANDLE() against NULL

Erni Sri Satya Vennela ernis@linux.microsoft.com net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer

Daniel Golle daniel@makrotopia.org net: dsa: mt7530: preserve VLAN tags on trapped link-local frames

Arınç ÜNAL arinc.unal@arinc9.com net: dsa: mt7530: rename mt753x_bpdu_port_fw enum to mt753x_to_cpu_fw

Daniel Golle daniel@makrotopia.org net: dsa: mt7530: fix FDB entries not aging out with short timeout

Daniel Golle daniel@makrotopia.org net: dsa: mt7530: sync driver-specific behavior of MT7531 variants

Matthew Leach matthew.leach@collabora.com wifi: ath11k: fix peer resolution on rx path when peer_id=0

P Praneesh quic_ppranees@quicinc.com wifi: ath11k: fix rssi station dump not updated in QCN9074

Sriram R quic_srirrama@quicinc.com wifi: ath11k: add new hw ops for IPQ5018 to get rx dest ring hashmap

Sriram R quic_srirrama@quicinc.com wifi: ath11k: initialize hw_ops for IPQ5018

Sriram R quic_srirrama@quicinc.com wifi: ath11k: update hal srng regs for IPQ5018

Sriram R quic_srirrama@quicinc.com wifi: ath11k: remap ce register space for IPQ5018

Sriram R quic_srirrama@quicinc.com wifi: ath11k: update ce configurations for IPQ5018

Sriram R quic_srirrama@quicinc.com wifi: ath11k: update hw params for IPQ5018

Youghandhar Chintala quic_youghand@quicinc.com wifi: ath11k: Trigger sta disconnect on hardware restart

Dmitry Baryshkov dmitry.baryshkov@oss.qualcomm.com drm/msm/snapshot: fix dumping of the unaligned regions

Felix Gu ustc.gu@gmail.com spi: mtk-snfi: Fix resource leak in mtk_snand_read_page_cache()

Jakub Kicinski kuba@kernel.org net: tls: prevent chain-after-chain in plain text SG

Jakub Kicinski kuba@kernel.org net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring

Xiang Mei xmei5@asu.edu net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot

Sayali Patil sayalip@linux.ibm.com powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise()

Mikko Perttunen mperttunen@nvidia.com drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN

Dmitry Baryshkov dmitry.baryshkov@oss.qualcomm.com drm/msm/dsi: don't dump registers past the mapped region

Chenguang Zhao zhaochenguang@kylinos.cn ethtool: fix ethnl_bitmap32_not_zero() bit interval semantics

Xiang Mei xmei5@asu.edu net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint

Lukas Bulwahn lukas.bulwahn@redhat.com HID: quirks: really enable the intended work around for appledisplay

Nicolas Escande nico.escande@gmail.com wifi: ath11k: fix error path leaks in some WMI WOW calls

Ethan Nelson-Moore enelsonmoore@gmail.com net: ethernet: cs89x0: remove stale CONFIG_MACH_MX31ADS reference

Linus Walleij linusw@kernel.org net: ethernet: cortina: Carry over frag counter

Andreas Haarmann-Thiemann eitschman@nebelreich.de net: ethernet: cortina: Drop half-assembled SKB

Linus Walleij linusw@kernel.org net: ethernet: cortina: Make RX SKB per-port

Jiayuan Chen jiayuan.chen@linux.dev irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT

Rosen Penev rosenp@gmail.com irqchip/ath79-cpu: Remove unused function

Gabor Juhos j4g8y7@gmail.com phy: marvell: mvebu-a3700-utmi: fix incorrect USB2_PHY_CTRL register access

Myeonghun Pak mhun512@gmail.com net: lan966x: avoid unregistering netdev on register failure

Bart Van Assche bvanassche@acm.org ice: fix locking in ice_dcb_rebuild()

Kuniyuki Iwashima kuniyu@google.com tcp: Fix imbalanced icsk_accept_queue count.

Florian Westphal fw@strlen.de netfilter: bridge: eb_tables: close module init race

Florian Westphal fw@strlen.de netfilter: x_tables: close dangling table module init race

Florian Westphal fw@strlen.de netfilter: ebtables: close dangling table module init race

Florian Westphal fw@strlen.de netfilter: ebtables: move to two-stage removal scheme

Florian Westphal fw@strlen.de netfilter: x_tables: add and use xtables_unregister_table_exit

Florian Westphal fw@strlen.de netfilter: x_tables: add and use xt_unregister_table_pre_exit

Pablo Neira Ayuso pablo@netfilter.org netfilter: Exclude LEGACY TABLES on PREEMPT_RT.

Breno Leitao leitao@debian.org netfilter: Make legacy configs user selectable

Kuniyuki Iwashima kuniyu@amazon.com netfilter: arptables: Select NETFILTER_FAMILY_ARP when building arp_tables.c

Florian Westphal fw@strlen.de netfilter: xtables: fix up kconfig dependencies

Florian Westphal fw@strlen.de netfilter: ebtables: allow xtables-nft only builds

Florian Westphal fw@strlen.de netfilter: xtables: allow xtables-nft only builds

Florian Westphal fw@strlen.de netfilter: arptables: allow xtables-nft only builds

Florian Westphal fw@strlen.de netfilter: x_tables: unregister the templates first

Guenter Roeck linux@roeck-us.net ARM: integrator: Fix early initialization

Maulik Shah maulik.shah@oss.qualcomm.com pinctrl: qcom: Fix wakeirq map by removing disconnected irqs for sm8150

David Gow david@davidgow.net kunit: config: KUNIT_DEBUGFS should depend on DEBUG_FS

David Gow david@davidgow.net kunit: config: Enable KUNIT_DEBUGFS by default

Sudeep Holla sudeep.holla@kernel.org firmware: arm_ffa: Skip free_pages on RX buffer alloc failure

Sudeep Holla sudeep.holla@kernel.org firmware: arm_ffa: Check for NULL FF-A ID table while driver registration

Takashi Iwai tiwai@suse.de HID: uclogic: Fix regression of input name assignment

Abdurrahman Hussain abdurrahman@nexthop.ai hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors

Abdurrahman Hussain abdurrahman@nexthop.ai hwmon: (pmbus/adm1266) register the nvmem device after pmbus_do_probe()

Abdurrahman Hussain abdurrahman@nexthop.ai hwmon: (pmbus/adm1266) register the gpio_chip after pmbus_do_probe()

Abdurrahman Hussain abdurrahman@nexthop.ai hwmon: (pmbus/adm1266) don't clobber GPIO bits before PDIO read in get_multiple

Abdurrahman Hussain abdurrahman@nexthop.ai hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR

Abdurrahman Hussain abdurrahman@nexthop.ai hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer

Abdurrahman Hussain abdurrahman@nexthop.ai hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer

Abdurrahman Hussain abdurrahman@nexthop.ai hwmon: (pmbus/adm1266) reject implausible blackbox record_count

Abdurrahman Hussain abdurrahman@nexthop.ai hwmon: (pmbus/adm1266) seed timestamp from the real-time clock

Sven Eckelmann sven@narfation.org batman-adv: tt: fix negative tt_buff_len

Sven Eckelmann sven@narfation.org batman-adv: tt: fix negative last_changeset_len

Sven Eckelmann sven@narfation.org batman-adv: tp_meter: avoid use of uninit sender vars

Sven Eckelmann sven@narfation.org batman-adv: bla: fix report_work leak on backbone_gw purge

Sven Eckelmann sven@narfation.org batman-adv: frag: disallow unicast fragment in fragment

Luxiao Xu rakukuip@gmail.com batman-adv: fix tp_meter counter underflow during shutdown

Ruide Cao caoruide123@gmail.com batman-adv: fix fragment reassembly length accounting

Sven Eckelmann sven@narfation.org batman-adv: dat: handle forward allocation error

Ruijie Li ruijieli51@gmail.com batman-adv: clear current gateway during teardown

Sven Eckelmann sven@narfation.org batman-adv: mcast: fix use-after-free in orig_node RCU release

Harry Wentland harry.wentland@amd.com drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async

Harry Wentland harry.wentland@amd.com drm/amd/display: Validate GPIO pin LUT table size before iterating

Harry Wentland harry.wentland@amd.com drm/amd/display: Fix integer overflow in bios_get_image()

Osama Abdelkader osama.abdelkader@gmail.com drm/bridge: megachips: remove bridge when irq request fails

Julien Chauveau chauveau.julien@gmail.com drm/bridge: it66121: acquire reset GPIO in probe

Deepanshu Kartikey kartikey406@gmail.com drm/virtio: use uninterruptible resv lock for plane updates

Bartosz Golaszewski bartosz.golaszewski@oss.qualcomm.com device property: set fwnode->secondary to NULL in fwnode_init()

Huacai Chen chenhuacai@kernel.org LoongArch: Remove unused code to avoid build warning

Michael Bommarito michael.bommarito@gmail.com RDMA/siw: Reject MPA FPDU length underflow before signed receive math

Johan Hovold johan@kernel.org spi: ti-qspi: fix use-after-free after DMA setup failure

Johan Hovold johan@kernel.org spi: sprd: fix error pointer deref after DMA setup failure

Michael Bommarito michael.bommarito@gmail.com scsi: isci: Fix use-after-free in device removal path

Osama Abdelkader osama.abdelkader@gmail.com drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c probe

Michael Bommarito michael.bommarito@gmail.com KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits

Masami Hiramatsu (Google) mhiramat@kernel.org tracing: Do not call map->ops->elt_free() if elt_alloc() fails

Zhihao Cheng chengzhihao1@huawei.com cifs: Fix busy dentry used after unmounting

John Walker johnwalker0@gmail.com wifi: cfg80211: advance loop vars in cfg80211_merge_profile()

Marcin Szycik marcin.szycik@intel.com ice: fix setting promisc mode while adding VID filter

Michael Bommarito michael.bommarito@gmail.com ixgbevf: fix use-after-free in VEPA multicast source pruning

Michael Bommarito michael.bommarito@gmail.com ipv4: raw: reject IP_HDRINCL packets with ihl < 5

Kyle Farnung kfarnung@gmail.com wifi: ath11k: clear shared SRNG pointer state on restart

Stefano Garzarella sgarzare@redhat.com vsock/virtio: reset connection on receiving queue overflow

Minh Nguyen minhnguyen.080505@gmail.com vsock/vmci: fix UAF when peer resets connection during handshake

Steven Rostedt rostedt@goodmis.org ring-buffer: Fix reporting of missed events in iterator

Dawei Feng dawei.feng@seu.edu.cn qed: fix double free in qed_cxt_tables_alloc()

Nan Li tonanli66@gmail.com netfilter: ipset: stop hash:* range iteration at end

Haoze Xie royenheart@gmail.com netfilter: nf_queue: hold bridge skb->dev while queued

Zhengchuan Liang zcliangcn@gmail.com netfilter: ip6t_hbh: reject oversized option lists

Michael Bommarito michael.bommarito@gmail.com net: ifb: report ethtool stats over num_tx_queues

Nicolai Buchwitz nb@tipi-net.de net: bcmgenet: keep RBUF EEE/PM disabled

Zijing Yin yzjaurora@gmail.com phonet/pep: disable BH around forwarded sk_receive_skb()

Michael Bommarito michael.bommarito@gmail.com Bluetooth: MGMT: validate Add Extended Advertising Data length

Mingyu Wang 25181214217@stu.xidian.edu.cn Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths

Jann Horn jannh@google.com Bluetooth: bnep: Fix UAF read of dev->name

David Carlier devnexen@gmail.com Bluetooth: ISO: drop ISO_END frames received without prior ISO_START

Safa Karakuş safa.karakus@secunnix.com Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()

Abdun Nihaal nihaal@cse.iitm.ac.in net: wwan: iosm: fix potential memory leaks in ipc_imem_init()

Takashi Iwai tiwai@suse.de ALSA: asihpi: Fix potential OOB array access at reading cache

Cássio Gabriel cassiogabrielcontato@gmail.com ALSA: ua101: Reject too-short USB descriptors

Abdurrahman Hussain abdurrahman@nexthop.ai hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX

Greg Kroah-Hartman gregkh@linuxfoundation.org sysfs: don't remove existing directory on update failure

Adrian Hunter adrian.hunter@intel.com i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue

Asim Viladi Oglu Manizada manizada@pm.me smb: client: reject userspace cifs.spnego descriptions

Sasha Levin sashal@kernel.org Revert "s390/cio: Fix device lifecycle handling in css_alloc_subchannel()"

Sasha Levin sashal@kernel.org Revert "x86/vdso: Fix output operand size of RDPID"

Deepanshu Kartikey kartikey406@gmail.com wifi: mac80211: check tdls flag in ieee80211_tdls_oper

Pengpeng Hou pengpeng@iscas.ac.cn s390/debug: Reject zero-length input before trimming a newline

Pavel Begunkov asml.silence@gmail.com io_uring: prevent opcode speculation

Allison Henderson achender@kernel.org net/rds: reset op_nents when zerocopy page pin fails

Nicholas Carlini nicholas@carlini.com io-wq: check that the predecessor is hashed in io_wq_remove_pending()

Johan Hovold johan@kernel.org drm/gma500/oaktrail_lvds: fix i2c adapter leaks on init

Johan Hovold johan@kernel.org drm/gma500/oaktrail_lvds: fix hang on init failure

Johan Hovold johan@kernel.org drm/gma500/oaktrail_hdmi: fix i2c adapter leak on setup

Gyeyoung Baek gye976@gmail.com drm/panfrost: Fix wait_bo ioctl leaking positive return from dma_resv_wait_timeout()

Sebastian Brzezinka sebastian.brzezinka@intel.com drm/i915: skip __i915_request_skip() for already signaled requests

Naval Alcalá ari@naval.cat iommu/vt-d: Disable DMAR for Intel Q35 IGFX

Raphael Zimmer raphael.zimmer@tu-ilmenau.de libceph: handle rbtree insertion error in decode_choose_args()

Raphael Zimmer raphael.zimmer@tu-ilmenau.de libceph: Fix potential out-of-bounds access in crush_decode()

Raphael Zimmer raphael.zimmer@tu-ilmenau.de libceph: Fix potential null-ptr-deref in decode_choose_args()

Raphael Zimmer raphael.zimmer@tu-ilmenau.de libceph: Fix potential out-of-bounds access in osdmap_decode()

Ma Ke make24@iscas.ac.cn powerpc/warp: Fix error handling in pika_dtm_thread

Viacheslav Dubeyko Slava.Dubeyko@ibm.com ceph: fix a buffer leak in __ceph_setxattr()

Cássio Gabriel cassiogabrielcontato@gmail.com ALSA: usb-audio: Bound MIDI endpoint descriptor scans

Chaitanya Kumar Borah chaitanya.kumar.borah@intel.com drm/i915/dp: Fix VSC dynamic range signaling for RGB formats

Ye Bin yebin10@huawei.com smb/client: fix possible infinite loop and oob read in symlink_data()

Qiang Ma maqianga@uniontech.com KVM: x86: Fix Xen hypercall tracepoint argument assignment

Junrui Luo moonafterrain@outlook.com KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic

Aaron Sacks contact@xchglabs.com KVM: Reject wrapped offset in kvm_reset_dirty_gfn()

Sergio Correia scorreia@redhat.com audit: enforce AUDIT_LOCKED for AUDIT_TRIM and AUDIT_MAKE_EQUIV

Zoran Ilievski goodboy@rexbytes.com net: atlantic: preserve PCI wake-from-D3 on shutdown when WOL enabled

Li Xiasong lixiasong1@huawei.com netfilter: nft_ct: fix missing expect put in obj eval

Sergio Correia scorreia@redhat.com audit: fix incorrect inheritable capability in CAPSET records

Li Xiasong lixiasong1@huawei.com netfilter: nf_conntrack_sip: get helper before allocating expectation

Matt Vollrath tactii@gmail.com i40e: Cleanup PTP pins on probe failure

Herbert Xu herbert@gondor.apana.org.au crypto: af_alg - Cap AEAD AD length to 0x80000000

Tonghao Zhang tonghao@bamaicloud.com net: bonding: update the slave array for broadcast mode

Hangbin Liu liuhangbin@gmail.com bonding: fix NULL pointer dereference in actor_port_prio setting

Breno Leitao leitao@debian.org netconsole: avoid out-of-bounds access on empty string in trim_newline()

Takahiro Kuwano Takahiro.Kuwano@infineon.com mtd: spi-nor: spansion: Enable JFFS2 write buffer for S25FS256T

Peter Ujfalusi peter.ujfalusi@linux.intel.com ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data()

Peter Ujfalusi peter.ujfalusi@linux.intel.com ASoC: SOF: pcm: Clear the susbstream pointer to NULL on close

Cássio Gabriel cassiogabrielcontato@gmail.com ALSA: core: Serialize deferred fasync state checks

Takashi Iwai tiwai@suse.de ALSA: misc: Use guard() for spin locks

Filipe Manana fdmanana@suse.com btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file()

Justin Chen justin.chen@broadcom.com net: bcmgenet: fix leaking free_bds

Ryo Takakura ryotkkr98@gmail.com net: bcmgenet: Initialize u64 stats seq counter

Eric Dumazet edumazet@google.com net/sched: sch_pie: annotate more data-races in pie_dump_stats()

Greg Kroah-Hartman gregkh@linuxfoundation.org smb: client: fix OOB reads parsing symlink error response

Liang Jie liangjie@lixiang.com smb: client: correctly handle ErrorContextData as a flexible array

Paolo Abeni pabeni@redhat.com net/sched: cls_flower: revert unintended changes

Jakub Kicinski kuba@kernel.org net: tls: fix strparser anchor skb leak on offload RX setup failure

Petr Oros poros@redhat.com ice: fix NULL pointer dereference in ice_reset_all_vfs()

Jacob Keller jacob.e.keller@intel.com ice: Pull common tasks into ice_vf_post_vsi_rebuild

Petr Oros poros@redhat.com iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler

Petr Oros poros@redhat.com iavf: wait for PF confirmation before removing VLAN filters

Petr Oros poros@redhat.com iavf: stop removing VLAN filters from PF on interface down

Petr Oros poros@redhat.com iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING

Eric Dumazet edumazet@google.com bonding: 3ad: implement proper RCU rules for port->aggregator

Hangbin Liu liuhangbin@gmail.com bonding: print churn state via netlink

Hangbin Liu liuhangbin@gmail.com bonding: add support for per-port LACP actor priority

Tonghao Zhang tonghao@bamaicloud.com net: bonding: add broadcast_neighbor option for 802.3ad

Jones Syue 薛懷宗 jonessyue@qnap.com bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner

Timur Kristóf timur.kristof@gmail.com drm/amd/display: Read EDID from VBIOS embedded panel info

Timur Kristóf timur.kristof@gmail.com drm/amd/display: Allow DCE link encoder without AUX registers

Sebastian Andrzej Siewior bigeasy@linutronix.de futex: Prevent lockup in requeue-PI during signal/ timeout wakeup

wangdicheng wangdicheng@kylinos.cn ALSA: hda/conexant: Fix missing error check for jack detection

wangdicheng wangdicheng@kylinos.cn ALSA: hda/conexant: Renaming the codec with device ID 0x1f86 and 0x1f87

Oldherl Oh me@oldherl.one ALSA: hda/conexant: fix some typos

Breno Leitao leitao@debian.org netconsole: propagate device name truncation in dev_name_store()

Matthew Wood thepacketgeek@gmail.com net: netconsole: move newline trimming to function

Eric Dumazet edumazet@google.com net/sched: sch_cake: annotate data-races in cake_dump_stats() (V)

Weiming Shi bestswngs@gmail.com bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst()

Beniamino Galvani b.galvani@gmail.com ipv6: rename and move ip6_dst_lookup_tunnel()

Beniamino Galvani b.galvani@gmail.com ipv4: add new arguments to udp_tunnel_dst_lookup()

Beniamino Galvani b.galvani@gmail.com ipv4: remove "proto" argument from udp_tunnel_dst_lookup()

Beniamino Galvani b.galvani@gmail.com ipv4: rename and move ip_route_output_tunnel()

Xin Long lucien.xin@gmail.com sctp: discard stale INIT after handshake completion

Xin Long lucien.xin@gmail.com netfilter: skip recording stale or retransmitted INIT

Christian A. Ehrhardt christian.ehrhardt@codasip.com ASoC: codecs: ab8500: Fix casting of private data

Heiko Schocher hs@nabladev.com net: phy: dp83869: fix setting CLK_O_SEL field.

William A. Kennington III william@wkennington.com net: mctp i2c: check length before marking flow active

Takashi Iwai tiwai@suse.de ALSA: usb-audio: Fix potential leak of pd at parsing UAC3 streams

Florian Westphal fw@strlen.de neigh: let neigh_xmit take skb ownership

Eric Dumazet edumazet@google.com neighbour: add RCU protection to neigh_tables[]

Paul Geurts paul.geurts@prodrive-technologies.com NFC: trf7970a: Ignore antenna noise when checking for RF field

Morduan Zang zhangdandan@uniontech.com net: usb: rtl8150: free skb on usb_submit_urb() failure in xmit

Zhan Jun zhanjun@uniontech.com net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit()

Ido Schimmel idosch@nvidia.com vrf: Fix a potential NPD when removing a port from a VRF

Eric Dumazet edumazet@google.com net/sched: sch_fq_pie: annotate data-races in fq_pie_dump_stats()

Eric Dumazet edumazet@google.com net/sched: sch_choke: annotate data-races in choke_dump_stats()

Stephen Hemminger stephen@networkplumber.org net/sched: netem: fix slot delay calculation overflow

Stephen Hemminger stephen@networkplumber.org net/sched: netem: validate slot configuration

Stephen Hemminger stephen@networkplumber.org net/sched: netem: fix queue limit check to include reordered packets

Stephen Hemminger stephen@networkplumber.org net/sched: netem: fix probability gaps in 4-state loss model

Nikola Z. Ivanov zlatistiv@gmail.com netdevsim: zero initialize struct iphdr in dummy sk_buff

Daan De Meyer daan@amutable.com cdrom, scsi: sr: propagate read-only status to block layer via set_disk_ro()

John Madieu john.madieu@gmail.com spi: rockchip: Read ISR, not IMR, to detect cs-inactive IRQ

Yang Yingliang yangyingliang@huawei.com spi: rockchip: switch to use modern name

Lizhe sensor1010@163.com drivers/spi-rockchip.c : Remove redundant variable slave

Florian Westphal fw@strlen.de netfilter: nf_conntrack_sip: don't use simple_strtoul

Jiexun Wang wangjiexun2025@gmail.com netfilter: xt_policy: fix strict mode inbound policy matching

Timur Kristóf timur.kristof@gmail.com drm/amdgpu/gfx6: Support harvested SI chips with disabled TCCs (v2)

Timur Kristóf timur.kristof@gmail.com drm/amdgpu/uvd3.1: Don't validate the firmware when already validated

Alexandre Demers alexandre.f.demers@gmail.com drm/amdgpu: fix spelling typos

Keith Busch kbusch@kernel.org nvme-pci: fix missed admin queue sq doorbell write

Pablo Neira Ayuso pablo@netfilter.org netfilter: arp_tables: fix IEEE1394 ARP payload parsing

Maurizio Lombardi mlombard@redhat.com nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers

Breno Leitao leitao@debian.org tracing: branch: Fix inverted check on stat tracer registration

Mark Harmstone mark@harmstone.com btrfs: fix double-decrement of bytes_may_use in submit_one_async_extent()

Wolfram Sang wsa+renesas@sang-engineering.com mailbox: mailbox-test: make data_ready a per-instance variable

Wolfram Sang wsa+renesas@sang-engineering.com mailbox: mailbox-test: initialize struct earlier

Wolfram Sang wsa+renesas@sang-engineering.com mailbox: mailbox-test: don't free the reused channel

Wolfram Sang wsa+renesas@sang-engineering.com mailbox: add sanity check for channel array

cuitao cuitao@kylinos.cn cgroup/rdma: fix integer overflow in rdmacg_try_charge()

Wolfram Sang wsa+renesas@sang-engineering.com mailbox: mailbox-test: free channels on probe error

Yuho Choi dbgh9129@gmail.com fbdev: offb: fix PCI device reference leak on probe failure

Anthony Pighin (Nokia) anthony.pighin@nokia.com rtc: abx80x: Disable alarm feature if no interrupt attached

Bae Yeonju iwasbaeyz@gmail.com fs/adfs: validate nzones in adfs_validate_bblk()

Kohei Enju kohei@enjuk.jp vhost_net: fix sleeping with preempt-disabled in vhost_net_busy_poll()

Lee Jones lee@kernel.org tipc: fix double-free in tipc_buf_append()

Alexey Kodanev aleksei.kodanev@bell-sw.com nfp: fix swapped arguments in nfp_encode_basic_qdr() calls

Mieczyslaw Nalewaj namiltd@yahoo.com net: dsa: realtek: rtl8365mb: fix mode mask calculation

Eric Dumazet edumazet@google.com net/sched: sch_sfb: annotate data-races in sfb_dump_stats()

Eric Dumazet edumazet@google.com net/sched: sch_red: annotate data-races in red_dump_stats()

Eric Dumazet edumazet@google.com net/sched: sch_fq_codel: remove data-races from fq_codel_dump_stats()

Eric Dumazet edumazet@google.com net/sched: sch_pie: annotate data-races in pie_dump_stats()

Eric Dumazet edumazet@google.com net_sched: sch_hhf: annotate data-races in hhf_dump_stats()

Michael Bommarito michael.bommarito@gmail.com net/rds: zero per-item info buffer before handing it to visitors

Hyunwoo Kim imv4bel@gmail.com ksmbd: scope conn->binding slowpath to bound sessions only

DaeMyung Kang charsyam@gmail.com ksmbd: destroy tree_conn_ida in ksmbd_session_destroy()

Jun Yan jerrysteve1101@gmail.com arm64: dts: meson-gxl-p230: fix ethernet PHY interrupt number

Weiming Shi bestswngs@gmail.com slip: bound decode() reads against the compressed packet length

Weiming Shi bestswngs@gmail.com slip: reject VJ receive packets on instances with no rstate array

Fernando Fernandez Mancera fmancera@suse.de netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check

Fernando Fernandez Mancera fmancera@suse.de netfilter: nfnetlink_osf: fix out-of-bounds read on option matching

Yingnan Zhang 342144303@qq.com ipvs: fix MTU check for GSO packets in tunnel mode

Pablo Neira Ayuso pablo@netfilter.org netfilter: xtables: restrict several matches to inet family

Florian Westphal fw@strlen.de netfilter: conntrack: remove sprintf usage

Xiang Mei xmei5@asu.edu netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO

Pablo Neira Ayuso pablo@netfilter.org netfilter: nft_osf: restrict it to ipv4

Weiming Shi bestswngs@gmail.com openvswitch: cap upcall PID array size and pre-size vport replies

Qingfang Deng qingfang.deng@linux.dev pppoe: drop PFC frames

Michael Bommarito michael.bommarito@gmail.com sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks

Eric Dumazet edumazet@google.com ipv6: fix possible UAF in icmpv6_rcv()

Matt Vollrath tactii@gmail.com e1000e: Unroll PTP in probe error handling

Kohei Enju kohei@enjuk.jp i40e: don't advertise IFF_SUPP_NOFCS

Eric Dumazet edumazet@google.com tcp: annotate data-races around (tp->write_seq - tp->snd_nxt)

Eric Dumazet edumazet@google.com tcp: annotate data-races around tp->dsack_dups

Eric Dumazet edumazet@google.com tcp: annotate data-races around tp->bytes_retrans

Eric Dumazet edumazet@google.com tcp: annotate data-races around tp->bytes_sent

Eric Dumazet edumazet@google.com tcp: add data-race annotations around tp->data_segs_out and tp->total_retrans

Eric Dumazet edumazet@google.com tcp: preserve const qualifier in tcp_sk()

Greg Kroah-Hartman gregkh@linuxfoundation.org container_of: add container_of_const() that preserves const-ness of the pointer

Greg Kroah-Hartman gregkh@linuxfoundation.org container_of: remove container_of_safe()

Vinicius Costa Gomes vinicius.gomes@intel.com net/sched: taprio: fix use-after-free in advance_sched() on schedule switch

Vladimir Oltean vladimir.oltean@nxp.com net/sched: taprio: rename close_time to end_time

Vladimir Oltean vladimir.oltean@nxp.com net/sched: taprio: refactor one skb dequeue from TXQ to separate function

Vladimir Oltean vladimir.oltean@nxp.com net/sched: taprio: continue with other TXQs if one dequeue() failed

Jiayuan Chen jiayuan.chen@linux.dev nexthop: fix IPv6 route referencing IPv4 nexthop

Dudu Lu phx0fer@gmail.com net/sched: sch_cake: fix NAT destination port not being updated in cake_update_flowkeys

Peng Fan peng.fan@nxp.com arm64: dts: imx8mm-tqma8mqml: Correct PAD settings for PMIC_nINT

Peng Fan peng.fan@nxp.com arm64: dts: imx8mn-tqma8mqnl: Correct PAD settings for PMIC_nINT

René Rebe rene@exactco.de PCMCIA: Fix garbled log messages for KERN_CONT

Peng Fan peng.fan@nxp.com arm64: dts: imx8mp-dhcom-som: Correct PAD settings for PMIC_nINT

Peng Fan peng.fan@nxp.com arm64: dts: imx8mp-icore-mx8mp: Correct PAD settings for PMIC_nINT

Paul Moses p@1g4.org crypto: ccp - copy IV using skcipher ivsize

T Pratham t-pratham@ti.com crypto: sa2ul - Fix AEAD fallback algorithm names

Ville Syrjälä ville.syrjala@linux.intel.com drm/i915/wm: Verify the correct plane DDB entry

Stanislav Lisovskiy stanislav.lisovskiy@intel.com drm/i915: Loop over all active pipes in intel_mbus_dbox_update

Gustavo Sousa gustavo.sousa@intel.com drm/i915: Extract intel_dbuf_mdclk_cdclk_ratio_update()

Ville Syrjälä ville.syrjala@linux.intel.com drm/i915: Constify watermark state checker

Yongpeng Yang yangyongpeng@xiaomi.com f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show()

Christophe JAILLET christophe.jaillet@wanadoo.fr f2fs: Use sysfs_emit_at() to simplify code

Brian Masney bmasney@redhat.com clk: visconti: pll: initialize clk_init_data to zero

Geert Uytterhoeven geert+renesas@glider.be lib/hexdump: print_hex_dump_bytes() calls print_hex_dump_debug()

Konrad Dybcio konrad.dybcio@oss.qualcomm.com clk: qcom: dispcc-sc7180: Add missing MDSS resets

Konrad Dybcio konrad.dybcio@oss.qualcomm.com dt-bindings: clock: qcom,dispcc-sc7180: Define MDSS resets

Geert Uytterhoeven geert+renesas@glider.be clk: xgene: Fix mapping leak in xgene_pllclk_init()

Arnd Bergmann arnd@arndb.de clk: qoriq: avoid format string warning

Sebastian Krzyszkowiak sebastian.krzyszkowiak@puri.sm clk: imx8mq: Correct the CSI PHY sels

Felix Gu ustc.gu@gmail.com clk: imx: imx6q: Fix device node reference leak in of_assigned_ldb_sels()

Felix Gu ustc.gu@gmail.com clk: imx: imx6q: Fix device node reference leak in pll6_bypassed()

Val Packett val@packett.cool clk: qcom: dispcc-sm8250: Enable parents for pixel clocks

Val Packett val@packett.cool clk: qcom: dispcc-sm8250: Use shared ops on the mdss vsync clk

Val Packett val@packett.cool clk: qcom: gcc-sc8180x: Use retention for PCIe power domains

Val Packett val@packett.cool clk: qcom: gcc-sc8180x: Use retention for USB power domains

Val Packett val@packett.cool clk: qcom: gcc-sc8180x: Add missing GDSCs

Val Packett val@packett.cool dt-bindings: clock: qcom,gcc-sc8180x: Add missing GDSCs

Junrui Luo moonafterrain@outlook.com scsi: target: core: Fix integer overflow in UNMAP bounds check

Yang Erkun yangerkun@huawei.com scsi: sg: Resolve soft lockup issue when opening /dev/sgX

Dmitry Baryshkov dmitry.baryshkov@oss.qualcomm.com clk: qcom: dispcc-sm8450: use RCG2 ops for DPTX1 AUX clock source

Florian Westphal fw@strlen.de RDMA/core: Prefer NLA_NUL_STRING

Pengpeng Hou pengpeng@iscas.ac.cn platform/x86: dell-wmi-sysman: bound enumeration string aggregation

Fedor Pchelkin pchelkin@ispras.ru platform/x86: dell_rbu: avoid uninit value usage in packet_size_write()

Pengpeng Hou pengpeng@iscas.ac.cn fs/ntfs3: terminate the cached volume label after UTF-8 conversion

Andy Shevchenko andriy.shevchenko@linux.intel.com nfs/blocklayout: Fix compilation error (`make W=1`) in bl_write_pagelist()

Abdun Nihaal nihaal@cse.iitm.ac.in mfd: mc13xxx-core: Fix memory leak in mc13xxx_add_subdevice_pdata()

Rafael J. Wysocki rafael.j.wysocki@intel.com platform/x86: panasonic-laptop: Fix OPTD notifier registration and cleanup

Randy Dunlap rdunlap@infradead.org tty: hvc_iucv: fix off-by-one in number of supported devices

Chen Ni nichen@iscas.ac.cn leds: lgm-sso: Remove duplicate assignments for priv->mmap

Rafael J. Wysocki rafael.j.wysocki@intel.com platform/surface: surfacepro3_button: Drop wakeup source on remove

Chen Ni nichen@iscas.ac.cn backlight: sky81452-backlight: Check return value of devm_gpiod_get_optional() in sky81452_bl_parse_dt()

Nuno Sa nuno.sa@analog.com dev_printk: add new dev_err_probe() helpers

Andy Shevchenko andriy.shevchenko@linux.intel.com driver core: Move dev_err_probe() to where it belogs

Greg Kroah-Hartman gregkh@linuxfoundation.org driver core: device.h: remove extern from function prototypes

Billy Tsai billy_tsai@aspeedtech.com i3c: mipi-i3c-hci: fix IBI payload length calculation for final status

Arnaldo Carvalho de Melo acme@redhat.com perf util: Kill die() prototype, dead for a long time

Leo Yan leo.yan@arm.com perf expr: Return -EINVAL for syntax error in expr__find_ids()

Yu-Chun Lin eleanor15x@gmail.com pinctrl: abx500: Fix type of 'argument' variable

Mike Leach mike.leach@arm.com perf: tools: cs-etm: Fix print issue for Coresight debug in ETE/TRBE trace

Ian Rogers irogers@google.com perf branch: Avoid incrementing NULL

Andy Shevchenko andriy.shevchenko@linux.intel.com pinctrl: cy8c95x0: Avoid returning positive values to user space

Andy Shevchenko andriy.shevchenko@linux.intel.com pinctrl: cy8c95x0: Unify messages with help of dev_err_probe()

Andy Shevchenko andriy.shevchenko@linux.intel.com pinctrl: cy8c95x0: remove duplicate error message

Ethan Tidmore ethantidmore06@gmail.com pinctrl: pinctrl-pic32: Fix resource leak

Puranjay Mohan puranjay@kernel.org bpf, arm32: Reject BPF-to-BPF calls and callbacks in the JIT

Yihan Ding dingyihan@uniontech.com bpf: allow UTF-8 literals in bpf_bprintf_prepare()

Daniel Borkmann daniel@iogearbox.net bpf: Fix precedence bug in convert_bpf_ld_abs alignment check

Michal Luczaj mhal@rbox.co bpf, sockmap: Take state lock for af_unix iter

Michal Luczaj mhal@rbox.co bpf, sockmap: Fix af_unix null-ptr-deref in proto update

Michal Luczaj mhal@rbox.co bpf, sockmap: Fix af_unix iter deadlock

Daniel Borkmann daniel@iogearbox.net bpf, arm64: Fix off-by-one in check_imm signed range check

Oliver Neukum oneukum@suse.com HID: usbhid: fix deadlock in hid_post_reset()

Richard Genoud richard.genoud@bootlin.com mtd: rawnand: sunxi: fix sunxi_nfc_hw_ecc_read_extra_oob

Cosmin Tanislav cosmin-gabriel.tanislav.xa@renesas.com mtd: parsers: ofpart: call of_node_get() for dedicated subpartitions

Cosmin Tanislav cosmin-gabriel.tanislav.xa@renesas.com mtd: parsers: ofpart: call of_node_put() only in ofpart_fail path

Shiji Yang yangshiji66@outlook.com mtd: spi-nor: swp: check SR_TB flag when getting tb_mask

Jonas Gorski jonas.gorski@gmail.com mtd: spi-nor: update spi_nor_fixups::post_sfdp() documentation

Takahiro Kuwano Takahiro.Kuwano@infineon.com mtd: spi-nor: sfdp: introduce smpt_map_id fixup hook

Takahiro Kuwano Takahiro.Kuwano@infineon.com mtd: spi-nor: sfdp: introduce smpt_read_dummy fixup hook

Tudor Ambarus tudor.ambarus@linaro.org mtd: spi-nor: Allow post_sfdp hook to return errors

Takahiro Kuwano Takahiro.Kuwano@infineon.com mtd: spi-nor: spansion: Add support for Infineon S25FS256T

Takahiro Kuwano Takahiro.Kuwano@infineon.com mtd: spi-nor: spansion: Make RD_ANY_REG_OP macro take number of dummy bytes

Tudor Ambarus tudor.ambarus@microchip.com mtd: spi-nor: spansion: Replace hardcoded values for addr_nbytes/addr_mode_nbytes

Takahiro Kuwano Takahiro.Kuwano@infineon.com mtd: spi-nor: spansion: Rename s28hs512t prefix

Haibo Chen haibo.chen@nxp.com mtd: spi-nor: core: correct the op.dummy.nbytes when check read operations

Chen Ni nichen@iscas.ac.cn mtd: physmap_of_gemini: Fix disabled pinctrl state check

Denis Benato denis.benato@linux.dev HID: asus: do not abort probe when not necessary

Denis Benato denis.benato@linux.dev HID: asus: make asus_resume adhere to linux kernel coding standards

Daniel Hodges hodgesd@meta.com ima: check return value of crypto_shash_final() in boot aggregate

Pengpeng Hou pengpeng@iscas.ac.cn tracing: Rebuild full_name on each hist_field_name() call

Frank Li Frank.Li@nxp.com dmaengine: mxs-dma: Fix missing return value from of_dma_controller_register()

Cole Leavitt cole@unwrap.rs soundwire: bus: demote UNATTACHED state warnings to dev_dbg()

Khairul Anuar Romli karom.9560@gmail.com dmaengine: dw-axi-dmac: Remove unnecessary return statement from void function

ZhengYuan Huang gality369@gmail.com ocfs2: validate group add input before caching

ZhengYuan Huang gality369@gmail.com ocfs2: validate bg_bits during freefrag scan

ZhengYuan Huang gality369@gmail.com ocfs2: fix listxattr handling when the buffer is full

Christoph Hellwig hch@lst.de arm64/xor: fix conflicting attributes for xor_block_template

Aaro Koskinen aaro.koskinen@iki.fi ARM: OMAP1: Fix DEBUG_LL and earlyprintk on OMAP16XX

Alexander Koskovich AKoskovich@pm.me arm64: dts: qcom: sm8250: Add missing CPU7 3.09GHz OPP

Alok Tiwari alok.a.tiwari@oracle.com soc: qcom: aoss: compare against normalized cooling state

Alok Tiwari alok.a.tiwari@oracle.com soc: qcom: llcc: fix v1 SB syndrome register offset

Junrui Luo moonafterrain@outlook.com ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison

Junrui Luo moonafterrain@outlook.com ocfs2/dlm: validate qr_numregions in dlm_match_regions()

Michal Grzedzicki mge@meta.com unshare: fix nsproxy leak in ksys_unshare() on set_cred_ucounts() failure

Sumit Gupta sumitg@nvidia.com soc/tegra: cbb: Set ERD on resume for err interrupt

David Heidelberg david@ixit.cz arm64: dts: qcom: sdm845-xiaomi-beryllium: Mark l1a regulator as powered during boot

Vladimir Zapolskiy vladimir.zapolskiy@linaro.org arm64: dts: qcom: sm8450: Enable UHS-I SDR50 and SDR104 SD card modes

Konrad Dybcio konrad.dybcio@oss.qualcomm.com arm64: dts: qcom: sm8450: Fix GIC_ITS range length

Dmitry Baryshkov dmitry.baryshkov@oss.qualcomm.com soc: qcom: ocmem: return -EPROBE_DEFER is ocmem is not available

Dmitry Baryshkov dmitry.baryshkov@oss.qualcomm.com soc: qcom: ocmem: register reasons for probe deferrals

Krzysztof Kozlowski krzysztof.kozlowski@linaro.org soc: qcom: ocmem: use scoped device node handling to simplify error paths

Akari Tsuyukusa akkun11.open@gmail.com arm64: dts: mediatek: mt7986a: Fix gpio-ranges pin count

Akari Tsuyukusa akkun11.open@gmail.com arm64: dts: mediatek: mt6795: Fix gpio-ranges pin count

Sherry Sun sherry.sun@nxp.com arm64: dts: imx8mp-evk: Enable pull select bit for PCIe regulator GPIO (M.2 W_DISABLE1)

Mikko Perttunen mperttunen@nvidia.com memory: tegra30-emc: Fix dll_change check

Mikko Perttunen mperttunen@nvidia.com memory: tegra124-emc: Fix dll_change check

Rafał Miłecki rafal@milecki.pl ARM: dts: mediatek: mt7623: fix efuse fallback compatible

Joshua Klinesmith joshuaklinesmith@gmail.com ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine

Thomas Huth thuth@redhat.com efi/capsule-loader: fix incorrect sizeof in phys array reallocation

Andreas Gruenbacher agruenba@redhat.com gfs2: prevent NULL pointer dereference during unmount

Andreas Gruenbacher agruenba@redhat.com gfs2: add some missing log locking

Jan Kara jack@suse.cz quota: Fix race of dquot_scan_active() with quota deactivation

Ricardo B. Marlière rbm@suse.com ktest: Run POST_KTEST hooks on failure and cancellation

Ricardo B. Marlière rbm@suse.com ktest: Honor empty per-test option overrides

Ricardo B. Marlière rbm@suse.com ktest: Avoid undef warning when WARNINGS_FILE is unset

Andreas Gruenbacher agruenba@redhat.com gfs2: Call unlock_new_inode before d_instantiate

Ming-Hung Tsai mtsai@redhat.com dm cache: fix missing return in invalidate_committed's error path

Cássio Gabriel cassiogabrielcontato@gmail.com ALSA: sc6000: Keep the programmed board state in card-private data

Takashi Iwai tiwai@suse.de ALSA: sc6000: Use standard print API

Pei Xiao xiaopei01@kylinos.cn spi: mtk-snfi: unregister ECC engine on probe failure and remove() callback

Vidya Sagar vidyas@nvidia.com PCI: tegra194: Allow system suspend when the Endpoint link is not up

Vidya Sagar vidyas@nvidia.com PCI: tegra194: Disable direct speed change for Endpoint mode

Vidya Sagar vidyas@nvidia.com PCI: tegra194: Use devm_gpiod_get_optional() to parse "nvidia,refclk-select"

Manikanta Maddireddy mmaddireddy@nvidia.com PCI: tegra194: Disable PERST# IRQ only in Endpoint mode

Vidya Sagar vidyas@nvidia.com PCI: tegra194: Don't force the device into the D0 state before L2

Manivannan Sadhasivam manivannan.sadhasivam@oss.qualcomm.com PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0()

Manikanta Maddireddy mmaddireddy@nvidia.com PCI: tegra194: Disable LTSSM after transition to Detect on surprise link down

Manikanta Maddireddy mmaddireddy@nvidia.com PCI: tegra194: Increase LTSSM poll time on surprise link down

Vidya Sagar vidyas@nvidia.com PCI: tegra194: Fix polling delay for L2 state

Frank Li Frank.Li@nxp.com PCI: Add PCIE_PME_TO_L2_TIMEOUT_US L2 ready timeout value

Cássio Gabriel cassiogabrielcontato@gmail.com ASoC: SOF: compress: return the configured codec from get_params

Daniel Baluta daniel.baluta@nxp.com ASoC: SOF: Add support for compress API for stream data/offset

Daniel Baluta daniel.baluta@nxp.com ASoC: SOF: Prepare set_stream_data_offset for compress API

Daniel Baluta daniel.baluta@nxp.com ASoC: SOF: Prepare ipc_msg_data to be used with compress API

V sujith kumar Reddy Vsujithkumar.Reddy@amd.com ASoC: SOF: amd: Fix for reading position updates from stream box.

Panagiotis Petrakopoulos npetrakopoulos2003@gmail.com ALSA: scarlett2: Add missing sentinel initializer field

Waiman Long longman@redhat.com selftest: memcg: skip memcg_sock test if address family not supported

Jane Chu jane.chu@oracle.com Documentation: fix a hugetlbfs reservation statement

AnishMulay anishm7030@gmail.com selftests/mm: skip migration tests if NUMA is unavailable

Chen-Yu Tsai wenst@chromium.org PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found

Gerd Bayer gbayer@linux.ibm.com PCI: Enable AtomicOps only if Root Port supports them

Srinivas Kandagatla srinivas.kandagatla@oss.qualcomm.com ASoC: qcom: qdsp6: topology: check widget type before accessing data

Shengjiu Wang shengjiu.wang@nxp.com ASoC: fsl_easrc: Change the type for iec958 channel status controls

Shengjiu Wang shengjiu.wang@nxp.com ASoC: fsl_easrc: Fix value type in fsl_easrc_iec958_get_bits()

Shengjiu Wang shengjiu.wang@nxp.com ASoC: fsl_easrc: Check the variable range in fsl_easrc_iec958_put_bits()

Shengjiu Wang shengjiu.wang@nxp.com ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_mode_put()

Shengjiu Wang shengjiu.wang@nxp.com ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_arc_mode_put()

Shengjiu Wang shengjiu.wang@nxp.com ASoC: fsl_micfil: Fix event generation in micfil_quality_set()

Felix Gu ustc.gu@gmail.com pmdomain: imx: scu-pd: Fix device_node reference leak during ->probe()

Felix Gu gu_0233@qq.com pmdomain: ti: omap_prm: Fix a reference leak on device node

Akhil P Oommen akhilpo@oss.qualcomm.com drm/msm/a6xx: Use barriers while updating HFI Q headers

Rob Clark robin.clark@oss.qualcomm.com drm/msm/shrinker: Fix can_block() logic

Rob Clark robin.clark@oss.qualcomm.com drm/msm/a6xx: Fix HLSQ register dumping

Lei Huang huanglei@kylinos.cn ALSA: hda/realtek: fix code style (ERROR: else should follow close brace '}')

Luke D. Jones luke@ljones.dev ALSA: hda/realtek: Whitespace fix

Timur Kristóf timur.kristof@gmail.com drm/amd/pm/smu7: Add SCLK cap for quirky Hawaii board

Timur Kristóf timur.kristof@gmail.com drm/amd/pm/ci: Fill DW8 fields from SMC

Timur Kristóf timur.kristof@gmail.com drm/amd/pm/ci: Clear EnabledForActivity field for memory levels

Timur Kristóf timur.kristof@gmail.com drm/amd/pm/ci: Fix powertune defaults for Hawaii 0x67B0

Timur Kristóf timur.kristof@gmail.com drm/amd/pm/smu7: Fix SMU7 voltage dependency on display clock

Timur Kristóf timur.kristof@gmail.com drm/amd/pm/ci: Disable MCLK DPM on problematic CI ASICs

Timur Kristóf timur.kristof@gmail.com drm/amd/pm/ci: Use highest MCLK on CI when MCLK DPM is disabled

Cássio Gabriel cassiogabrielcontato@gmail.com ALSA: core: Validate compress device numbers without dynamic minors

Sebastian Reichel sebastian.reichel@collabora.com drm/panel: simple: Correct G190EAN01 prepare timing

Alexander Koskovich akoskovich@pm.me drm/msm/dsi: rename MSM8998 DSI version from V2_2_0 to V2_0_0

Yuanjie Yang yuanjie.yang@oss.qualcomm.com drm/msm/dpu: fix mismatch between power and frequency

Pei Xiao xiaopei01@kylinos.cn spi: hisi-kunpeng: prevent infinite while() loop in hisi_spi_flush_fifo

Alex Deucher alexander.deucher@amd.com drm/amdgpu/gfx10: look at the right prop for gfx queue priority

Daniel Jordan daniel.m.jordan@oracle.com padata: Put CPU offline callback in ONLINE section to allow failure

Chuyi Zhou zhouchuyi@bytedance.com padata: Remove cpu online check from cpu add and removal

Andy Shevchenko andriy.shevchenko@linux.intel.com fbdev: matroxfb: Mark variable with __maybe_unused to avoid W=1 build break

Guillaume Gonnet ggonnet.linux@gmail.com dm init: ensure device probing has finished in dm-mod.waitfor=

Srinivasan Shanmugam srinivasan.shanmugam@amd.com drm/amdgpu: Add default case in DVI mode validation

Ethan Tidmore ethantidmore06@gmail.com drm/sun4i: Fix resource leaks

Felix Gu ustc.gu@gmail.com spi: fsl-qspi: Use reinit_completion() for repeated operations

Junrui Luo moonafterrain@outlook.com dm log: fix out-of-bounds write due to region_count overflow

Ming-Hung Tsai mtsai@redhat.com dm cache metadata: fix memory leak on metadata abort retry

Ming-Hung Tsai mtsai@redhat.com dm cache: fix dirty mapping checking in passthrough mode switching

Ming-Hung Tsai mtsai@redhat.com dm cache: support shrinking the origin device

Ming-Hung Tsai mtsai@redhat.com dm cache: fix concurrent write failure in passthrough mode

Ming-Hung Tsai mtsai@redhat.com dm cache policy smq: fix missing locks in invalidating cache blocks

Ming-Hung Tsai mtsai@redhat.com dm cache: fix write hang in passthrough mode

Ming-Hung Tsai mtsai@redhat.com dm cache: fix write path cache coherency in passthrough mode

Ming-Hung Tsai mtsai@redhat.com dm cache: fix null-deref with concurrent writes in passthrough mode

Sander Vanheule sander@svanheule.net ASoC: sti: use managed regmap_field allocations

Sander Vanheule sander@svanheule.net ASoC: sti: Return errors from regmap_field_alloc()

Ethan Tidmore ethantidmore06@gmail.com drm/sun4i: backend: fix error pointer dereference

Alexander Konyukhov Alexander.Konyukhov@kaspersky.com drm/komeda: fix integer overflow in AFBC framebuffer size check

Jiayuan Chen jiayuan.chen@linux.dev net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master

Xin Long lucien.xin@gmail.com sctp: fix missing encap_port propagation for GSO fragments

Dudu Lu phx0fer@gmail.com Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp

Pauli Virtanen pav@iki.fi Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER

Jonathan Rissanen jonathan.rissanen@axis.com Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error

Luiz Augusto von Dentz luiz.von.dentz@intel.com Bluetooth: L2CAP: Fix printing wrong information if SDU length exceeds MTU

Sun Jian sun.jian.kdev@gmail.com bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb

Taegu Ha hataegu0826@gmail.com ppp: require CAP_NET_ADMIN in target netns for unattached ioctls

Greg Jumper greg.jumper@oracle.com net/rds: Restrict use of RDS/IB to the initial network namespace

Håkon Bugge haakon.bugge@oracle.com net/rds: Optimize rds_ib_laddr_check

Jamal Hadi Salim jhs@mojatatu.com net/sched: act_ct: Only release RCU read lock after ct_ft

Mashiro Chen mashiro.chen@mailbox.org net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf

Jiri Slaby (SUSE) jirislaby@kernel.org 6pack: propagage new tty types

Florian Westphal fw@strlen.de netfilter: nft_fwd_netdev: check ttl/hl before forwarding

Florian Westphal fw@strlen.de netfilter: xt_socket: enable defrag after all other checks

Justin Chen justin.chen@broadcom.com net: bcmgenet: fix racing timeout handler

Zak Kemble zakkemble@gmail.com net: bcmgenet: switch to use 64bit statistics

Doug Berger opendmb@gmail.com net: bcmgenet: support reclaiming unsent Tx packets

Doug Berger opendmb@gmail.com net: bcmgenet: move DESC_INDEX flow to ring 0

Doug Berger opendmb@gmail.com net: bcmgenet: add bcmgenet_has_* helpers

Florian Fainelli florian.fainelli@broadcom.com net: bcmgenet: Remove custom ndo_poll_controller()

Florian Fainelli florian.fainelli@broadcom.com net: bcmgenet: Remove TX ring full logging

Justin Chen justin.chen@broadcom.com net: bcmgenet: fix off-by-one in bcmgenet_put_txcb

Wang Wensheng wsw9603@163.com arm64: kexec: Remove duplicate allocation for trans_pgd

Haoyu Lu hechushiguitu666@gmail.com ACPI: AGDI: fix missing newline in error message

Weiming Shi bestswngs@gmail.com bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec()

Jiayuan Chen jiayuan.chen@linux.dev bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks

Ethan Tidmore ethantidmore06@gmail.com wifi: brcmfmac: Fix error pointer dereference

Weiming Shi bestswngs@gmail.com bpf: fix end-of-list detection in cgroup_storage_get_next_key()

Eric Dumazet edumazet@google.com macvlan: annotate data-races around port->bc_queue_len_used

Sourabh Jain sourabhjain@linux.ibm.com powerpc/crash: fix backup region offset update to elfcorehdr

Chih Kai Hsu hsu.chih.kai@realtek.com r8152: fix incorrect register write to USB_UPHY_XTAL

Alexey Velichayshiy a.velichayshiy@ispras.ru wifi: rtw89: phy: fix uninitialized variable access in rtw89_phy_cfo_set_crystal_cap()

David Carlier devnexen@gmail.com bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path

Thorsten Blum thorsten.blum@toblux.com bpf, devmap: Remove unnecessary if check in for loop

Petr Pavlu petr.pavlu@suse.com module: Fix freeing of charp module parameters when CONFIG_SYSFS=n

Petr Pavlu petr.pavlu@suse.com params: Replace __modinit with __init_or_module

Shyam Saini shyamsaini@linux.microsoft.com kernel: globalize lookup_or_create_module_kobject()

Shyam Saini shyamsaini@linux.microsoft.com kernel: param: rename locate_module_kobject

Cai Xinchen caixinchen1@huawei.com dpaa2: compile dpaa2 even CONFIG_FSL_DPAA2_ETH=n

Cai Xinchen caixinchen1@huawei.com dpaa2: add independent dependencies for FSL_DPAA2_SWITCH

Feng Yang yangfeng@kylinos.cn bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap

Vadim Fedorenko vadfed@meta.com bpf: Add CHECKSUM_COMPLETE to bpf test progs

Duoming Zhou duoming@zju.edu.cn wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet

Zilin Guan zilin@seu.edu.cn wifi: mwifiex: Fix memory leak in mwifiex_11n_aggregate_pkt()

Mario Limonciello (AMD) superm1@kernel.org firmware: dmi: Correct an indexing error in dmi.h

Bart Van Assche bvanassche@acm.org locking: Fix rwlock support in <linux/spinlock_up.h>

Thomas Gleixner tglx@kernel.org hrtimer: Reduce trace noise in hrtimer_start()

Peter Zijlstra peterz@infradead.org hrtimer: Avoid pointless reprogramming in __hrtimer_start_range_ns()

Richard Clark richard.xnu.clark@gmail.com hrtimers: Update the return type of enqueue_hrtimer()

Brian Masney bmasney@redhat.com irqchip/irq-pic32-evic: Address warning related to wrong printf() formatter

Gui-Dong Han hanguidong02@gmail.com debugfs: check for NULL pointer in debugfs_create_str()

Gopi Krishna Menon krishnagopi487@gmail.com thermal/drivers/spear: Fix error condition for reading st,thermal-flags

Danilo Krummrich dakr@kernel.org devres: fix missing node debug info in devm_krealloc()

Cole Leavitt cole@unwrap.rs pstore/ram: fix resource leak when ioremap() fails

Deepanshu Kartikey kartikey406@gmail.com nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty()

Bart Van Assche bvanassche@acm.org drbd: Balance RCU calls in drbd_adm_dump_devices()

HyungJung Joo jhj140711@gmail.com fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START

Ming Lei ming.lei@redhat.com blk-cgroup: wait for blkcg cleanup before initializing new disk

Mingzhe Zou mingzhe.zou@easystack.cn bcache: fix uninitialized closure object

Amit Kumar Mahapatra amit.kumar-mahapatra@amd.com mtd: spi-nor: sst: Fix SST write failure

Benjamin Cheng benjamin.cheng@amd.com drm/amdgpu/vcn4: Avoid overflow on msg bound check

Benjamin Cheng benjamin.cheng@amd.com drm/amdgpu/vcn3: Avoid overflow on msg bound check

Dudu Lu phx0fer@gmail.com vsock/virtio: fix accept queue count leak on transport mismatch

Norbert Szetei norbert@doyensec.com vsock: fix buffer size clamping order

Viorel Suman (OSS) viorel.suman@oss.nxp.com pwm: imx-tpm: Count the number of enabled channels in probe

Sanjaikumar V S sanjaikumar.vs@dicortech.com mtd: spi-nor: sst: Fix write enable before AAI sequence

Bence Csókás csokas.bence@prolan.hu mtd: spi-nor: sst: Factor out common write operation to `sst_nor_write_data()`

Siwei Zhang oss@fourdim.xyz Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()

Sven Eckelmann sven@narfation.org batman-adv: bla: put backbone reference on failed claim hash insert

Sven Eckelmann sven@narfation.org batman-adv: bla: only purge non-released claims

Sven Eckelmann sven@narfation.org batman-adv: bla: prevent use-after-free when deleting claims

Jiexun Wang wangjiexun2025@gmail.com batman-adv: stop caching unowned originator pointers in BAT IV

Jiexun Wang wangjiexun2025@gmail.com batman-adv: reject new tp_meter sessions during teardown

Lyes Bourennani lbourennani@fuzzinglabs.com batman-adv: fix integer overflow on buff_pos

Ben Morris bmorris@anthropic.com sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL

Alex Deucher alexander.deucher@amd.com drm/amdgpu/pm: align Hawaii mclk workaround with radeon

Alex Deucher alexander.deucher@amd.com drm/amdgpu/pm: add missing revision check for CI

John B. Moore jbmoore61@gmail.com drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission

John B. Moore jbmoore61@gmail.com drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ

Philip Yang Philip.Yang@amd.com drm/amdgpu: zero-initialize GART table on allocation

Alex Deucher alexander.deucher@amd.com drm/radeon: add missing revision check for CI

Alysa Liu Alysa.Liu@amd.com drm/amdkfd: validate SVM ioctl nattr against buffer size

Ashutosh Desai ashutoshdesai993@gmail.com drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()

Benjamin Cheng benjamin.cheng@amd.com drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg

Benjamin Cheng benjamin.cheng@amd.com drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg

Benjamin Cheng benjamin.cheng@amd.com drm/amdgpu/vce: Prevent partial address patches

Benjamin Cheng benjamin.cheng@amd.com drm/amdgpu: Add bounds checking to ib_{get,set}_value

Johan Hovold johan@kernel.org spi: mpc52xx: fix use-after-free on unbind

Johan Hovold johan@kernel.org spi: orion: fix clock imbalance on registration failure

Johan Hovold johan@kernel.org spi: imx: fix runtime pm leak on probe deferral

Johan Hovold johan@kernel.org spi: mtk-nor: fix controller deregistration

Haoxiang Li lihaoxiang@isrc.iscas.ac.cn media: omap3isp: drop the use count of v4l2 pipeline

Matthias Fend matthias.fend@emfend.at media: i2c: ov08d10: fix image vertical start setting

Wenmeng Liu wenmeng.liu@oss.qualcomm.com media: i2c: imx412: Assert reset GPIO during probe

Sergey Shtylyov s.shtylyov@auroraos.dev media: dib8000: avoid division by 0 in dib8000_set_dds()

Abdun Nihaal nihaal@cse.iitm.ac.in media: pci: zoran: fix potential memory leak in zoran_probe()

Krishna Chomal krishna.chomal108@gmail.com platform/x86: hp-wmi: Ignore backlight and FnLock events

Wang Jun 1742789905@qq.com media: saa7164: add ioremap return checks and cleanups

Johan Hovold johan@kernel.org regulator: bd9571mwv: fix OF node reference imbalance

Johan Hovold johan@kernel.org regulator: act8945a: fix OF node reference imbalance

Oliver Neukum oneukum@suse.com media: rc: streamzap: Error handling in probe

Oliver Neukum oneukum@suse.com media: rc: xbox_remote: heed DMA restrictions

Johan Hovold johan@kernel.org regulator: max77650: fix OF node reference imbalance

Sakari Ailus sakari.ailus@linux.intel.com staging: media: atomisp: Disallow all private IOCTLs

Alexander Koskovich akoskovich@pm.me media: i2c: ov8856: free control handler on error in ov8856_init_controls()

Ricardo Ribalda ribalda@chromium.org media: uvcvideo: Enable VB2_DMABUF for metadata stream

Paul E. McKenney paulmck@kernel.org exit: Sleep at TASK_IDLE when waiting for application core dump

Zhiguo Niu zhiguo.niu@unisoc.com f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic

Zhiguo Niu zhiguo.niu@unisoc.com f2fs: compress: change the first parameter of page_array_{alloc,free} to sbi

Huacai Chen chenhuacai@kernel.org LoongArch: Use per-root-bridge PCIH flag to skip mem resource fixup

Wentao Guan guanwentao@uniontech.com LoongArch: Fix potential ADE in loongson_gpu_fixup_dma_hang()

David Woodhouse dwmw@amazon.co.uk KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value

Yongpeng Yang yangyongpeng@xiaomi.com f2fs: fix incorrect multidevice info in trace_f2fs_map_blocks()

Yongpeng Yang yangyongpeng@xiaomi.com f2fs: fix fiemap boundary handling when read extent cache is incomplete

Cen Zhang zzzccc427@gmail.com f2fs: add READ_ONCE() for i_blocks in f2fs_update_inode()

Gang Yan yangang@kylinos.cn mptcp: fix scheduling with atomic in timestamp sockopt

Gang Yan yangang@kylinos.cn mptcp: sockopt: set timestamp flags on subflow socket, not msk

Shardul Bankar shardul.b@mpiricsoftware.com mptcp: use MPTCP_RST_EMPTCP for ACK HMAC validation failure

Shardul Bankar shardul.b@mpiricsoftware.com mptcp: use MPJoinSynAckHMacFailure for SynAck HMAC failure

Jason Gunthorpe jgg@ziepe.ca RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path

Michael Bommarito michael.bommarito@gmail.com RDMA/rxe: Reject unknown opcodes before ICRC processing

Jason Gunthorpe jgg@ziepe.ca RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp()

Jason Gunthorpe jgg@ziepe.ca RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()

André Draszik andre.draszik@linaro.org power: supply: max17042: avoid overflow when determining health

Lukas Wunner lukas@wunner.de PCI/AER: Stop ruling out unbound devices as error source

Shuai Xue xueshuai@linux.alibaba.com PCI/AER: Clear only error bits in PCIe Device Status

Zisen Ye zisenye@stu.xidian.edu.cn smb/client: fix out-of-bounds read in symlink_data()

Vasily Gorbik gor@linux.ibm.com s390/debug: Reject zero-length input in debug_input_flush_fn()

Jason Gunthorpe jgg@ziepe.ca RDMA/hns: Fix unlocked call to hns_roce_qp_remove()

Ilya Maximets i.maximets@ovn.org openvswitch: vport: fix self-deadlock on release of tunnel ports

Chaitanya Kulkarni kch@nvidia.com nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free

Fedor Pchelkin pchelkin@ispras.ru nvme-apple: drop invalid put of admin queue reference count

Junrui Luo moonafterrain@outlook.com md/raid10: fix divide-by-zero in setup_geo() with zero far_copies

Raphael Zimmer raphael.zimmer@tu-ilmenau.de libceph: Fix slab-out-of-bounds access in auth message processing

Michael Bommarito michael.bommarito@gmail.com isofs: validate block number from NFS file handle in isofs_export_iget

Michael Bommarito michael.bommarito@gmail.com isofs: validate Rock Ridge CE continuation extent against volume size

Eric Biggers ebiggers@kernel.org dm-verity-fec: correctly reject too-small hash devices

Eric Biggers ebiggers@kernel.org dm-verity-fec: correctly reject too-small FEC devices

Mikulas Patocka mpatocka@redhat.com dm: fix a buffer overflow in ioctl processing

Mikulas Patocka mpatocka@redhat.com dm: don't report warning when doing deferred remove

Mikulas Patocka mpatocka@redhat.com dm-thin: fix metadata refcount underflow

Guangshuo Li lgs201920130244@gmail.com btrfs: fix double free in create_space_info() error path

Srinivas Kandagatla srinivas.kandagatla@oss.qualcomm.com ASoC: qcom: q6apm: remove child devices when apm is removed

Srinivas Kandagatla srinivas.kandagatla@oss.qualcomm.com ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens

Srinivas Kandagatla srinivas.kandagatla@oss.qualcomm.com ASoC: qcom: q6apm-dai: reset queue ptr on trigger stop

Cássio Gabriel cassiogabrielcontato@gmail.com ASoC: Intel: bytcr_wm5102: Fix MCLK leak on platform_clock_control error

Joseph Salisbury joseph.salisbury@oracle.com ASoC: fsl_easrc: fix comment typo

Tommaso Soncin soncintommaso@gmail.com ASoC: amd: yc: Add HP OMEN Gaming Laptop 16-ap0xxx product line in quirk table

Shrikanth Hegde sshegde@linux.ibm.com cpuidle: powerpc: avoid double clear when breaking snooze

Conor Dooley conor.dooley@microchip.com clk: microchip: mpfs-ccc: fix out of bounds access during output registration

Johan Hovold johan@kernel.org spi: topcliff-pch: fix use-after-free on unbind

Thorsten Blum thorsten.blum@linux.dev thermal/drivers/sprd: Fix raw temperature clamping in sprd_thm_rawdata_to_temp

Thorsten Blum thorsten.blum@linux.dev thermal/drivers/sprd: Fix temperature clamping in sprd_thm_temp_to_rawdata

Michael Bommarito michael.bommarito@gmail.com udf: reject descriptors with oversized CRC length

Mingming Cao mmc@linux.ibm.com ibmveth: Disable GSO for packets with small MSS

Hamza Mahfooz hamzamahfooz@linux.microsoft.com hv_sock: fix ARM64 support

Xu Yang xu.yang_2@nxp.com extcon: ptn5150: handle pending IRQ events during system resume

Shyam Prasad N sprasad@microsoft.com cifs: change_conf needs to be called for session setup

Shyam Prasad N sprasad@microsoft.com cifs: abort open_cached_dir if we don't request leases

Myeonghun Pak mhun512@gmail.com hwmon: (corsair-psu) Close HID device on probe errors

Sanman Pradhan psanman@juniper.net hwmon: (ltc2992) Fix u32 overflow in power read path

Sanman Pradhan psanman@juniper.net hwmon: (ltc2992) Clamp threshold writes to hardware range

Hongling Zeng zenghongling@kylinos.cn parisc: Fix IRQ leak in LASI driver

Nan Li tonanli66@gmail.com net/rds: handle zerocopy send cleanup before the message is queued

Maoyi Xie maoyixie.tju@gmail.com ip6_gre: Use cached t->net in ip6erspan_changelink().

SeungJu Cheon suunj1331@gmail.com sound: ua101: fix division by zero at probe

Kai Zen kai.aizen.dev@gmail.com net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo

Miklos Szeredi mszeredi@redhat.com fanotify: fix false positive on permission events

Johan Hovold johan@kernel.org staging: vme_user: fix root device leak on init failure

Johan Hovold johan@kernel.org spi: zynqmp-gqspi: fix controller deregistration

Siwei Zhang oss@fourdim.xyz Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()

Siwei Zhang oss@fourdim.xyz Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb()

Michael Bommarito michael.bommarito@gmail.com Bluetooth: virtio_bt: validate rx pkt_type header length

Michael Bommarito michael.bommarito@gmail.com Bluetooth: virtio_bt: clamp rx length before skb_put

Yilin Zhu zylzyl2333@gmail.com ipv6: xfrm6: release dst on error in xfrm6_rcv_encap()

Ruijie Li ruijieli51@gmail.com xfrm: provide message size for XFRM_MSG_MAPPING

Sourabh Jain sourabhjain@linux.ibm.com powerpc/kdump: fix KASAN sanitization flag for core_$(BITS).o

Cássio Gabriel cassiogabrielcontato@gmail.com ALSA: firewire-tascam: Do not drop unread control events

Felix Gu ustc.gu@gmail.com usb: ulpi: fix memory leak on ulpi_register() error paths

Fabio Porcedda fabio.porcedda@gmail.com USB: serial: option: add Telit Cinterion LE910Cx compositions

Aaro Koskinen aaro.koskinen@iki.fi USB: omap_udc: DMA: Don't enable burst 4 mode

Cássio Gabriel cassiogabrielcontato@gmail.com ALSA: usb-audio: Fix UAC3 cluster descriptor size check

Takashi Iwai tiwai@suse.de ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3()

Greg Kroah-Hartman gregkh@linuxfoundation.org usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl

Greg Kroah-Hartman gregkh@linuxfoundation.org usb: usblp: fix heap leak in IEEE 1284 device ID via short response

Tristan Madani tristan@talencesecurity.com wifi: b43: enforce bounds check on firmware key index in b43_rx()

Jiri Slaby (SUSE) jirislaby@kernel.org wifi: ath5k: do not access array OOB

Jeongjun Park aha310510@gmail.com wifi: rsi: fix kthread lifetime race between self-exit and external-stop

Tristan Madani tristan@talencesecurity.com wifi: b43legacy: enforce bounds check on firmware key index in RX path

Leon Yen leon.yen@mediatek.com wifi: mt76: mt7921: fix a potential clc buffer length underflow

Jann Horn jannh@google.com exit: prevent preemption of oopsing TASK_DEAD task

Zilin Guan zilin@seu.edu.cn ice: Fix memory leak in ice_set_ringparam()

Cen Zhang zzzccc427@gmail.com Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock

Luiz Augusto von Dentz luiz.von.dentz@intel.com Bluetooth: hci_sync: Remove remaining dependencies of hci_request

Jamal Hadi Salim jhs@mojatatu.com net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked

Qingfang Deng qingfang.deng@linux.dev flow_dissector: do not dissect PPPoE PFC frames

Dong Chenchen dongchenchen2@huawei.com net: Fix icmp host relookup triggering ip_rt_bug

Sean Christopherson seanjc@google.com KVM: x86: Fix shadow paging use-after-free due to unexpected GFN

Tejas Bharambe tejas.bharambe@outlook.com ext4: validate p_idx bounds in ext4_ext_correct_indexes

Felix Gu ustc.gu@gmail.com spi: meson-spicc: Fix double-put in remove path

Yussuf Khalil dev@pp3345.net drm/amd/display: Do not skip unrelated mode changes in DSC validation

Johan Hovold johan@kernel.org spi: rockchip: fix controller deregistration

Mark Brown broonie@kernel.org ASoC: SOF: Don't allow pointer operations on unconfigured streams

Shivam Kalra shivamkalra98@zohomail.in ACPI: video: force native backlight on HP OMEN 16 (8A44)

Jinjie Ruan ruanjinjie@huawei.com ACPI: CPPC: Fix related_cpus inconsistency during CPU hotplug

Guangshuo Li lgs201920130244@gmail.com ACPI: scan: Use acpi_dev_put() in object add error paths

Rajat Gupta rajgupt@qti.qualcomm.com fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free

Corey Minyard corey@minyard.net ipmi:si: Return state to normal if message allocation fails

Corey Minyard corey@minyard.net ipmi: Check event message buffer response for bad data

Corey Minyard corey@minyard.net ipmi: Add limits to event and receive message requests

Greg Kroah-Hartman gregkh@linuxfoundation.org scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()

Kai Ma k4729.23098@gmail.com netfilter: reject zero shift in nft_bitwise

Andrea Mayer andrea.mayer@uniroma2.it net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels

Deepanshu Kartikey kartikey406@gmail.com ALSA: caiaq: fix usb_dev refcount leak on probe failure

Arjan van de Ven arjan@linux.intel.com drm/amdgpu: fix zero-size GDS range init on RDNA4

Greg Kroah-Hartman gregkh@linuxfoundation.org ipv6: rpl: reserve mac_len headroom when recompressed SRH grows

Takashi Iwai tiwai@suse.de ALSA: caiaq: Don't abort when no input device is available

Takashi Iwai tiwai@suse.de ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path

Douglas Anderson dianders@chromium.org driver core: Add kernel-doc for DEV_FLAG_COUNT enum value

Yucheng Lu kanolyc@gmail.com crypto: authencesn - reject short ahash digests during instance creation

Andrea Mayer andrea.mayer@uniroma2.it seg6: fix seg6 lwtunnel output redirect for L2 reduced encap mode

Yang Xiuwei yangxiuwei@kylinos.cn scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails

Keenan Dong keenanat2000@gmail.com rtmutex: Use waiter::task instead of current in remove_waiter()

Tobias Gaertner tob.gaertner@me.com ntfs3: fix integer overflow in run_unpack() volume boundary check

Tobias Gaertner tob.gaertner@me.com ntfs3: add buffer boundary checks to run_unpack()

Steven Rostedt rostedt@goodmis.org ktest: Fix the month in the name of the failure directory

Chen Zhao chezhao@nvidia.com IB/core: Fix zero dmac race in neighbor resolution

Junrui Luo moonafterrain@outlook.com dm mirror: fix integer overflow in create_dirty_log()

Thorsten Blum thorsten.blum@linux.dev crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path

Thorsten Blum thorsten.blum@linux.dev crypto: atmel-tdes - fix DMA sync direction

Haoxiang Li lihaoxiang@isrc.iscas.ac.cn crypto: ccree - fix a memory leak in cc_mac_digest()

Thomas Fourier fourier.thomas@gmail.com crypto: hisilicon - Fix dma_unmap_single() direction

Thorsten Blum thorsten.blum@linux.dev crypto: atmel-ecc - Release client on allocation failure

Thorsten Blum thorsten.blum@linux.dev crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup

Eric Biggers ebiggers@kernel.org crypto: arm64/aes - Fix 32-bit aes_mac_update() arg treated as 64-bit

Johan Hovold johan@kernel.org can: ucan: fix devres lifetime

Shuvam Pandey shuvampandey1@gmail.com Bluetooth: hci_event: fix potential UAF in SSP passkey handlers

Yiyang Chen cyyzero16@gmail.com taskstats: set version in TGID exit notifications

Zhenzhong Wu jt26wzz@gmail.com tcp: call sk_data_ready() after listener migration

Chia-Ming Chang chiamingc@synology.com inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails

Junrui Luo moonafterrain@outlook.com md/raid5: validate payload size before accessing journal metadata

Chia-Ming Chang chiamingc@synology.com md/raid5: fix soft lockup in retry_aligned_read()

Sohei Koyama skoyama@ddn.com ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()

Jens Axboe axboe@kernel.dk io_uring/poll: fix multishot recv missing EOF on wakeup race

James Kim james010kim@gmail.com mtd: docg3: fix use-after-free in docg3_release()

Uwe Kleine-König u.kleine-koenig@pengutronix.de mtd: docg3: Convert to platform remove callback returning void

Yosry Ahmed yosry@kernel.org KVM: nSVM: Add missing consistency check for nCR3 validity

Yosry Ahmed yosry@kernel.org KVM: nSVM: Add missing consistency check for EFER, CR0, CR4, and CS

Yosry Ahmed yosry@kernel.org KVM: nSVM: Clear tracking of L1->L2 NMI and soft IRQ on nested #VMEXIT

Yosry Ahmed yosry@kernel.org KVM: nSVM: Clear GIF on nested #VMEXIT(INVALID)

Yosry Ahmed yosry@kernel.org KVM: nSVM: Always inject a #GP if mapping VMCB12 fails on nested VMRUN

Yosry Ahmed yosry.ahmed@linux.dev KVM: nSVM: Use vcpu->arch.cr2 when updating vmcb12 on nested #VMEXIT

Yosry Ahmed yosry@kernel.org KVM: nSVM: Ensure AVIC is inhibited when restoring a vCPU to guest mode

Sean Christopherson seanjc@google.com KVM: SVM: Explicitly mark vmcb01 dirty after modifying VMCB intercepts

Kevin Cheng chengkev@google.com KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0

Yosry Ahmed yosry@kernel.org KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2

Yosry Ahmed yosry@kernel.org KVM: nSVM: Sync NextRIP to cached vmcb12 after VMRUN of L2

Yosry Ahmed yosry.ahmed@linux.dev KVM: nSVM: Mark all of vmcb02 dirty when restoring nested state

Denis M. Karpov komlomal@gmail.com userfaultfd: allow registration of ranges below mmap_min_addr

Johan Hovold johan@kernel.org rtc: ntxec: fix OF node reference imbalance

Jacqueline Wong jacqwong@google.com tpm: tpm_tis: add error logging for data transfer

Shawn Lin shawn.lin@rock-chips.com mmc: sdhci-of-dwcmshc: Disable clock before DLL configuration

Bin Liu b-liu@ti.com mmc: block: use single block write in retry

Ryan Roberts ryan.roberts@arm.com randomize_kstack: Maintain kstack_offset per task

Krzysztof Kozlowski krzysztof.kozlowski@oss.qualcomm.com power: supply: axp288_charger: Do not cancel work before initializing it

Huacai Chen chenhuacai@kernel.org LoongArch: Show CPU vulnerabilites correctly

Arnd Bergmann arnd@arndb.de tpm: avoid -Wunused-but-set-variable

Nathan Chancellor nathan@kernel.org extract-cert: Wrap key_pass with '#ifdef USE_PKCS11_ENGINE'

Raphael Zimmer raphael.zimmer@tu-ilmenau.de libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply()

Ruide Cao caoruide123@gmail.com ipv4: icmp: validate reply type before using icmp_pointers

hkbinbin hkbinbinbin@gmail.com RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv

Luca Ceresoli luca.ceresoli@bootlin.com drm/arcpgu: fix device node leak

Marek Vasut marex@nabladev.com net: ks8851: Avoid excess softirq scheduling

Marek Vasut marex@nabladev.com net: ks8851: Reinstate disabling of BHs around IRQ handler

Ruijie Li ruijieli51@gmail.com net/smc: avoid early lgr access in smc_clc_wait_msg

Ao Zhou draw51280@163.com net: rds: fix MR cleanup on copy error

Yiyang Chen cyyzero16@gmail.com tools/accounting: handle truncated taskstats netlink messages

Jonathan Santos Jonathan.Santos@analog.com iio: adc: ad7768-1: fix one-shot mode data acquisition

Cássio Gabriel cassiogabrielcontato@gmail.com ALSA: 6fire: Fix input volume change detection

Takashi Iwai tiwai@suse.de ALSA: caiaq: Handle probe errors properly

Cássio Gabriel cassiogabrielcontato@gmail.com ALSA: caiaq: Fix control_put() result and cache rollback

Takashi Iwai tiwai@suse.de ALSA: core: Fix potential data race at fasync handling

Jens Axboe axboe@kernel.dk io_uring/poll: ensure EPOLL_ONESHOT is propagated for EPOLL_URING_WAKE

Longxuan Yu ylong030@ucr.edu io_uring/poll: fix signed comparison in io_poll_get_ownership()

David Lechner dlechner@baylibre.com iio: adc: ti-ads7950: use iio_push_to_buffers_with_ts_unaligned()

Pavel Begunkov asml.silence@gmail.com io_uring/timeout: check unused sqe fields

Dawei Feng dawei.feng@seu.edu.cn rbd: fix null-ptr-deref when device_add_disk() fails

Simon Liebold simonlie@amazon.de selftests/mqueue: Fix incorrectly named file

Helge Deller deller@gmx.de parisc: _llseek syscall is only available for 32-bit userspace

Robert Beckett bob.beckett@collabora.com nvme: respect NVME_QUIRK_DISABLE_WRITE_ZEROES when wzsl is set

Robert Beckett bob.beckett@collabora.com nvme-pci: add NVME_QUIRK_DISABLE_WRITE_ZEROES for Kingston OM3SGP4

Josh Hunt johunt@akamai.com md/raid10: fix deadlock with check operation and nowait requests

Gao Xiang xiang@kernel.org erofs: fix the out-of-bounds nameoff handling for trailing dirents

Cássio Gabriel cassiogabrielcontato@gmail.com ALSA: seq_oss: return full count for successful SEQ_FULLSIZE writes

Harin Lee me@harin.net ALSA: ctxfi: Add fallback to default RSR for S/PDIF

Cássio Gabriel cassiogabrielcontato@gmail.com ALSA: aoa: i2sbus: fix OF node lifetime handling

Vasiliy Kovalev kovalev@altlinux.org ext2: reject inodes with zero i_nlink and valid mode in ext2_iget()

Manivannan Sadhasivam manivannan.sadhasivam@oss.qualcomm.com net: qrtr: ns: Fix use-after-free in driver remove()

Chen Ni nichen@iscas.ac.cn media: i2c: imx219: Check return value of devm_gpiod_get_optional() in imx219_probe()

Josh Law objecting@objecting.org lib/ts_kmp: fix integer overflow in pattern length calculation

Rong Zhang i@rong.moe Revert "ALSA: usb: Increase volume range that triggers a warning"

Koichiro Den den@valinux.co.jp PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown

Luxiao Xu rakukuip@gmail.com net: strparser: fix skb_head leak in strp_abort_strp()

Zhengchuan Liang zcliangcn@gmail.com net: caif: clear client service pointer on teardown

Ziqing Chen chenziqing@xiaomi.com ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names()

Ming Qian ming.qian@oss.nxp.com media: amphion: Fix race between m2m job_abort and device_run

Herbert Xu herbert@gondor.apana.org.au crypto: pcrypt - Fix handling of MAY_BACKLOG requests

Chao Yu chao@kernel.org f2fs: fix to detect potential corrupted nid in free_nid_list

Michael Bommarito michael.bommarito@gmail.com um: drivers: call kernel_strrchr() explicitly in cow_user.c

Fedor Pchelkin pchelkin@ispras.ru wifi: rtw88: check for PCI upstream bridge existence

Douglas Anderson dianders@chromium.org driver core: Don't let a device probe until it's ready

Heming Zhao heming.zhao@suse.com ocfs2: split transactions in dio completion to avoid credit exhaustion

Douglas Anderson dianders@chromium.org device property: Make modifications of fwnode "flags" thread safe

Douglas Anderson dianders@chromium.org regset: use kvzalloc() for regset_get_alloc()

Youngmin Nam youngmin.nam@samsung.com arm64: set __exception_irq_entry with __irq_entry as a default

Ming Lei ming.lei@redhat.com blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none

Jianpeng Chang jianpeng.chang.cn@windriver.com net: enetc: fix the deadlock of enetc_mdio_lock

Jesse.Zhang Jesse.Zhang@amd.com drm/amdgpu: Limit BO list entry count to prevent resource exhaustion

Tvrtko Ursulin tvrtko.ursulin@igalia.com drm/amdgpu: Use vmemdup_array_user in amdgpu_bo_create_list_entry_array

Herbert Xu herbert@gondor.apana.org.au padata: Remove comment for reorder_work

Herbert Xu herbert@gondor.apana.org.au padata: Fix pd UAF once and for all

Thomas Zimmermann tzimmermann@suse.de firmware: google: framebuffer: Do not mark framebuffer as busy

Tyllis Xu livelycarpet87@gmail.com ibmasm: fix heap over-read in ibmasm_send_i2o_message()

Tyllis Xu livelycarpet87@gmail.com ibmasm: fix OOB reads in command_file_write due to missing size checks

Tyllis Xu livelycarpet87@gmail.com misc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt()

Greg Kroah-Hartman gregkh@linuxfoundation.org drm/nouveau: fix u32 overflow in pushbuf reloc bounds check

Takashi Iwai tiwai@suse.de ALSA: usb-audio: Evaluate packsize caps at the right place

Michal Pecio michal.pecio@gmail.com usb: xhci: Make usb_host_endpoint.hcpriv survive endpoint_disable()

Cássio Gabriel cassiogabrielcontato@gmail.com ALSA: usb-audio: Fix Audio Advantage Micro II SPDIF switch

Cássio Gabriel cassiogabrielcontato@gmail.com ALSA: usb-audio: Avoid false E-MU sample-rate notifications

Cássio Gabriel cassiogabrielcontato@gmail.com ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES

Anderson Nascimento anderson@allelesecurity.com rxrpc: Fix missing validation of ticket length in non-XDR key preparsing

Sean Christopherson seanjc@google.com crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed

Sean Christopherson seanjc@google.com crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed

Sean Christopherson seanjc@google.com crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed

Berk Cem Goksel berkcgoksel@gmail.com ALSA: caiaq: take a reference on the USB device in create_card()

Cryolitia PukNgae cryolitia.pukngae@linux.dev ALSA: usb-audio: apply quirk for MOONDROP JU Jiu

George Saad geoo115@gmail.com f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io()

Tristan Madani tristan@talencesecurity.com ksmbd: use check_add_overflow() to prevent u16 DACL size overflow

Tristan Madani tristan@talencesecurity.com ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment

Michael Bommarito michael.bommarito@gmail.com smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path

Michael Bommarito michael.bommarito@gmail.com smb: client: require a full NFS mode SID before reading mode bits

DaeMyung Kang charsyam@gmail.com smb: server: fix max_connections off-by-one in tcp accept path

Michael Bommarito michael.bommarito@gmail.com smb: server: fix active_num_conn leak on transport allocation failure

Darrick J. Wong djwong@kernel.org fuse: quiet down complaints in fuse_conn_limit_write

Samuel Page sam@bynar.io fuse: reject oversized dirents in page cache

Greg Kroah-Hartman gregkh@linuxfoundation.org fs/ntfs3: validate rec->used in journal-replay file record check

Wang Jie jiewang2024@lzu.edu.cn rxrpc: only handle RESPONSE during service challenge

David Howells dhowells@redhat.com rxrpc: Fix anonymous key handling

Mark Rutland mark.rutland@arm.com arm64: mm: fix VA-range sanity check

Nathan Chancellor nathan@kernel.org scripts/dtc: Remove unused dts_version in dtc-lexer.l

Johannes Berg johannes.berg@intel.com wifi: iwlwifi: read txq->read_ptr under lock

Ye Bin yebin10@huawei.com f2fs: fix null-ptr-deref in f2fs_submit_page_bio()

Takashi Iwai tiwai@suse.de ALSA: control: Avoid WARN() for symlink errors

André Draszik andre.draszik@linaro.org scsi: ufs: core: Fix use-after free in init error and remove paths

David Howells dhowells@redhat.com rxrpc: Fix recvmsg() unconditional requeue

Srinivas Kandagatla srinivas.kandagatla@oss.qualcomm.com ASoC: qcom: q6apm: move component registration to unmanaged version

Dawei Li set_pte_at@outlook.com soc: qcom: apr: make remove callback of apr driver void returned

Koichiro Den den@valinux.co.jp PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup

Tamir Duberstein tamird@kernel.org scripts: generate_rust_analyzer.py: define scripts

Ming Lei ming.lei@redhat.com ublk: fix deadlock when reading partition table

David Woodhouse dwmw@amazon.co.uk KVM: x86: Use __DECLARE_FLEX_ARRAY() for UAPI structures with VLAs

Yuqi Xu xuyuqiabc@gmail.com rxrpc: reject undecryptable rxkad response tickets

Guocai He guocai.he.cn@windriver.com Revert "wifi: cfg80211: stop NAN and P2P in cfg80211_leave"

David Howells dhowells@redhat.com rxrpc: Fix call removal to use RCU safe deletion

David Howells dhowells@redhat.com rxrpc: Fix key quota calculation for multitoken keys

Joseph Qi joseph.qi@linux.alibaba.com ocfs2: fix out-of-bounds write in ocfs2_write_end_inline

Deepanshu Kartikey kartikey406@gmail.com ocfs2: validate inline data i_size during inode read

Dmitry Antipov dmantipov@yandex.ru ocfs2: add inline inode consistency check to ocfs2_validate_inode_block()

Sebastian Krzyszkowiak sebastian.krzyszkowiak@puri.sm arm64: dts: imx8mq-librem5: Bump BUCK1 suspend voltage up to 0.85V

Sebastian Krzyszkowiak sebastian.krzyszkowiak@puri.sm Revert "arm64: dts: imx8mq-librem5: Set the DVS voltages lower"

Sebastian Krzyszkowiak sebastian.krzyszkowiak@puri.sm arm64: dts: imx8mq-librem5: Bump BUCK1 suspend voltage to 0.81V

Sebastian Krzyszkowiak sebastian.krzyszkowiak@puri.sm arm64: dts: imx8mq-librem5: Set the DVS voltages lower

Vladimir Oltean vladimir.oltean@nxp.com net: dsa: clean up FDB, MDB, VLAN entries on unbind

Felix Fietkau nbd@nbd.name wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure

Andrew Price anprice@redhat.com gfs2: Validate i_depth for exhash directories

Andrew Price anprice@redhat.com gfs2: Improve gfs2_consist_inode() usage

Minhong He heminhong@kylinos.cn ipv6: add NULL checks for idev in SRv6 paths

Sasha Levin sashal@kernel.org Revert "net: ixp4xx_eth: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set()"

Sasha Levin sashal@kernel.org Revert "net: ethernet: xscale: Check for PTP support properly"

Koichiro Den den@valinux.co.jp PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown

Jeongjun Park aha310510@gmail.com media: hackrf: fix to not free memory after the device is registered in hackrf_probe()

Abd-Alrhman Masalkhi abd.masalkhi@gmail.com media: vidtv: fix pass-by-value structs causing MSAN warnings

Deepanshu Kartikey kartikey406@gmail.com nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map

Jeongjun Park aha310510@gmail.com media: as102: fix to not free memory after the device is registered in as102_usb_probe()

Mingzhe Zou mingzhe.zou@easystack.cn bcache: fix cached_dev.sb_bio use-after-free and crash

Berk Cem Goksel berkcgoksel@gmail.com ALSA: 6fire: fix use-after-free on disconnect

Abhishek Kumar abhishek_sts8@yahoo.com media: em28xx: fix use-after-free in em28xx_v4l2_open()

Ruslan Valiyev linuxoid@gmail.com media: vidtv: fix nfeeds state corruption on start_streaming failure

Breno Leitao leitao@debian.org mm: blk-cgroup: fix use-after-free in cgwb_release_workfn()

Ritesh Harjani (IBM) ritesh.list@gmail.com mm/kasan: fix double free for kasan pXds

Sean Christopherson seanjc@google.com KVM: x86: Use scratch field in MMIO fragment to hold small write values

Sasha Levin sashal@kernel.org checkpatch: add support for Assisted-by tag

Pengpeng Hou pengpeng@iscas.ac.cn rxrpc: proc: size address buffers for %pISpc output

Pablo Neira Ayuso pablo@netfilter.org nf_tables: nft_dynset: fix possible stateful expression memleak in error path

Christian König christian.koenig@amd.com drm/amdgpu: remove two invalid BUG_ON()s

Wang Liang wangliang74@huawei.com bonding: check xdp prog when set bond mode

Hangbin Liu liuhangbin@gmail.com bonding: return detailed error when loading native XDP fails

Eric Dumazet edumazet@google.com net: sched: fix TCF_LAYER_TRANSPORT handling in tcf_get_base_ptr()

Eric Dumazet edumazet@google.com net: add proper RCU protection to /proc/net/ptype

Jeongjun Park aha310510@gmail.com ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free

Sasha Levin sashal@kernel.org Revert "dmaengine: idxd: Fix not releasing workqueue on .release()"

Sean Christopherson seanjc@google.com KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION

ZhengYuan Huang gality369@gmail.com ocfs2: handle invalid dinode in ocfs2_group_extend

Tejas Bharambe tejas.bharambe@outlook.com ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY

Joseph Qi joseph.qi@linux.alibaba.com ocfs2: fix possible deadlock between unlink and dio_end_io_write

Ruslan Valiyev linuxoid@gmail.com media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections

Zhihao Cheng chengzhihao1@huawei.com dcache: Limit the minimal number of bucket to two

Harin Lee me@harin.net ALSA: ctxfi: Limit PTP to a single page

SeongJae Park sj@kernel.org Docs/admin-guide/mm/damon/reclaim: warn commit_inputs vs param updates race

Fabio Porcedda fabio.porcedda@gmail.com USB: serial: option: add Telit Cinterion FN990A MBIM composition

Junrui Luo moonafterrain@outlook.com staging: sm750fb: fix division by zero in ps_to_hz()

Tamir Duberstein tamird@kernel.org scripts: generate_rust_analyzer.py: avoid FD leak

Greg Kroah-Hartman gregkh@linuxfoundation.org fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO

Xu Yang xu.yang_2@nxp.com usb: port: add delay after usb_hub_set_port_power()

Dave Carey carvsdriver@gmail.com USB: cdc-acm: Add quirks for Yoga Book 9 14IAH10 INGENIC touchscreen

Daniel Brát danek.brat@gmail.com usb: storage: Expand range of matched versions for VL817 quirks entry

Nathan Rebello nathan.c.rebello@gmail.com usbip: validate number_of_packets in usbip_pack_ret_submit()

Greg Kroah-Hartman gregkh@linuxfoundation.org ksmbd: require 3 sub-authorities before reading sub_auth[2]

Greg Kroah-Hartman gregkh@linuxfoundation.org ksmbd: validate EaNameLength in smb2_get_ea()

Greg Kroah-Hartman gregkh@linuxfoundation.org usb: gadget: renesas_usb3: validate endpoint index in standard request handlers

Greg Kroah-Hartman gregkh@linuxfoundation.org usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete()

Greg Kroah-Hartman gregkh@linuxfoundation.org usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb()

Greg Kroah-Hartman gregkh@linuxfoundation.org fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO

Greg Kroah-Hartman gregkh@linuxfoundation.org ALSA: fireworks: bound device-supplied status before string array lookup

Greg Kroah-Hartman gregkh@linuxfoundation.org drm/vc4: platform_get_irq_byname() returns an int

Greg Kroah-Hartman gregkh@linuxfoundation.org NFC: digital: Bounds check NFC-A cascade depth in SDD response handler

Greg Kroah-Hartman gregkh@linuxfoundation.org net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete()

Greg Kroah-Hartman gregkh@linuxfoundation.org HID: core: clamp report_size in s32ton() to avoid undefined shift

Greg Kroah-Hartman gregkh@linuxfoundation.org HID: alps: fix NULL pointer dereference in alps_raw_event()

Lin YuChen starpt.official@gmail.com staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify()

Greg Kroah-Hartman gregkh@linuxfoundation.org i2c: s3c24xx: check the size of the SMBUS message before using it

Samuel Page sam@bynar.io can: raw: fix ro->uniq use-after-free in raw_rcv()

Junxi Qian qjx1298677004@gmail.com nfc: llcp: add missing return after LLCP_CLOSED checks

Jouni Högander jouni.hogander@intel.com drm/i915/psr: Do not use pipe_src as borders for SU area

Geoffrey D. Bennett g@b4.vu ALSA: usb-audio: Improve Focusrite sample rate filtering

Florian Westphal fw@strlen.de netfilter: conntrack: add missing netlink policy validations

Maarten Lankhorst dev@lankhorst.se Revert "drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug"

Zide Chen zide.chen@intel.com perf/x86/intel/uncore: Skip discovery table for offline dies

Samasth Norway Ananda samasth.norway.ananda@oracle.com gpio: tegra: fix irq_release_resources calling enable instead of disable

Alice Mikityanska alice@isovalent.com l2tp: Drop large packets with UDP encap

Jiexun Wang wangjiexun2025@gmail.com af_unix: read UNIX_DIAG_VFS data under unix_state_lock

Zhengchuan Liang zcliangcn@gmail.com netfilter: ip6t_eui64: reject invalid MAC header for all packets

Ren Wei n05ec@lzu.edu.cn netfilter: xt_multiport: validate range encoding in checkentry

Xiang Mei xmei5@asu.edu netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator

Daniel Golle daniel@makrotopia.org selftests: net: bridge_vlan_mcast: wait for h1 before querier check

Greg Kroah-Hartman gregkh@linuxfoundation.org xfrm_user: fix info leak in build_mapping()

Steffen Klassert steffen.klassert@secunet.com xfrm: Wait for RCU readers during policy netns exit

Maciej Fijalkowski maciej.fijalkowski@intel.com xsk: tighten UMEM headroom validation to account for tailroom and min frame

Agalakov Daniil ade@amicon.ru e1000: check return value of e1000_read_eeprom

Michal Schmidt mschmidt@redhat.com ixgbevf: add missing negotiate_features op to Hyper-V ops table

Pengpeng Hou pengpeng@iscas.ac.cn tracing/probe: reject non-closed empty immediate strings

Jon Hunter jonathanh@nvidia.com dt-bindings: net: Fix Tegra234 MGBE PTP clock

Pengpeng Hou pengpeng@iscas.ac.cn nfc: s3fwrn5: allocate rx skb before consuming bytes

Yiqi Sun sunyiqixm@gmail.com ipv4: icmp: fix null-ptr-deref in icmp_build_probe()

Eric Dumazet edumazet@google.com net: lapbether: handle NETDEV_PRE_TYPE_CHANGE

Ruide Cao caoruide123@gmail.com net: sched: act_csum: validate nested VLAN headers

Nicholas Carlini nicholas@carlini.com eventpoll: defer struct eventpoll free to RCU grace period

Paolo Abeni pabeni@redhat.com epoll: use refcount to reduce ep_mutex contention

Maíra Canal mcanal@igalia.com drm/vc4: Protect madv read in vc4_gem_object_mmap() with madv_lock

Maíra Canal mcanal@igalia.com drm/vc4: Fix a memory leak in hang state error path

Maíra Canal mcanal@igalia.com drm/vc4: Fix memory leak of BO array in hang state

Maíra Canal mcanal@igalia.com drm/vc4: Release runtime PM reference after binding V3D

Long Li longli@microsoft.com PCI: hv: Set default NUMA node to 0 for devices without affinity info

Sebastian Krzyszkowiak sebastian.krzyszkowiak@puri.sm arm64: dts: imx8mq: Set the correct gpu_ahb clock frequency

Potin Lai potin.lai.pt@gmail.com soc: aspeed: socinfo: Mask table entries for accurate SoC ID matching

Tomasz Merta tomasz.merta@arrow.com ASoC: stm32_sai: fix incorrect BCLK polarity for DSP_A/B, LEFT_J

Pengpeng Hou pengpeng@iscas.ac.cn wifi: brcmfmac: validate bsscfg indices in IF events

Arthur Husband artmoty@gmail.com ata: ahci: force 32-bit DMA for JMicron JMB582/JMB585

Benoît Sevens bsevens@google.com HID: roccat: fix use-after-free in roccat_report_event

songxiebing songxiebing@kylinos.cn ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IAH10

leo vriska leo@60228.dev HID: quirks: add HID_QUIRK_ALWAYS_POLL for 8BitDo Pro 3

Andy Shevchenko andriy.shevchenko@linux.intel.com pinctrl: intel: Fix the revision for new features (1kOhm PD, HW debouncer)

Gilson Marquato Júnior gilsonmandalogo@hotmail.com ASoC: amd: yc: Add DMI entry for HP Laptop 15-fc0xxx

Fredric Cover FredTheDude@proton.me fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath

Phil Willoughby willerz@gmail.com ALSA: usb-audio: Fix quirk flags for NeuralDSP Quad Cortex

Kuninori Morimoto kuninori.morimoto.gx@renesas.com ASoC: soc-core: call missing INIT_LIST_HEAD() for card_aux_list

Pengpeng Hou pengpeng@iscas.ac.cn wifi: wl1251: validate packet IDs before indexing tx_frames

Dustin L. Howett dustin@howett.net ALSA: hda/realtek: add quirk for Framework F111:000F

Florian Westphal fw@strlen.de netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry

César Montoya sprit152009@gmail.com ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 15-eg0xxx

Goldwyn Rodrigues rgoldwyn@suse.de btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file()

Wenyuan Li 2063309626@qq.com can: mcp251x: add error handling for power enable in open and resume

Cássio Gabriel cassiogabrielcontato@gmail.com ASoC: SOF: topology: reject invalid vendor array size in token parser

Zhang Heng zhangheng@kylinos.cn ASoC: amd: yc: Add DMI quirk for Thin A15 B7VF

Arnd Bergmann arnd@arndb.de ALSA: asihpi: avoid write overflow check warning

Arnd Bergmann arnd@arndb.de media: rkvdec: reduce stack usage in rkvdec_init_v4l2_vp9_count_tbl()

Andrii Kovalchuk coderpy4@proton.me ALSA: hda/realtek: Add HP ENVY Laptop 13-ba0xxx quirk

Vee Satayamas vsatayamas@gmail.com ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK BM1403CDA

-------------

Diffstat:

Documentation/admin-guide/mm/damon/reclaim.rst | 4 + .../bindings/net/nvidia,tegra234-mgbe.yaml | 4 +- Documentation/mm/hugetlbfs_reserv.rst | 2 +- Documentation/networking/bonding.rst | 15 + Makefile | 4 +- arch/arm/boot/dts/mt7623.dtsi | 2 +- arch/arm/mach-omap1/clock_data.c | 4 +- arch/arm/mach-versatile/integrator_cp.c | 13 +- arch/arm/net/bpf_jit_32.c | 6 + .../boot/dts/amlogic/meson-gxl-s905d-p230.dts | 3 +- .../arm64/boot/dts/freescale/imx8mm-tqma8mqml.dtsi | 2 +- .../arm64/boot/dts/freescale/imx8mn-tqma8mqnl.dtsi | 2 +- .../arm64/boot/dts/freescale/imx8mp-dhcom-som.dtsi | 2 +- arch/arm64/boot/dts/freescale/imx8mp-evk.dts | 2 +- .../boot/dts/freescale/imx8mp-icore-mx8mp.dtsi | 2 +- arch/arm64/boot/dts/freescale/imx8mq-librem5.dtsi | 2 +- arch/arm64/boot/dts/freescale/imx8mq.dtsi | 2 +- arch/arm64/boot/dts/mediatek/mt6795.dtsi | 2 +- arch/arm64/boot/dts/mediatek/mt7986a.dtsi | 2 +- .../boot/dts/qcom/sdm845-xiaomi-beryllium.dts | 1 + arch/arm64/boot/dts/qcom/sm8250.dtsi | 5 + arch/arm64/boot/dts/qcom/sm8450.dtsi | 5 +- arch/arm64/crypto/aes-modes.S | 4 +- arch/arm64/include/asm/exception.h | 5 - arch/arm64/include/asm/xor.h | 2 +- arch/arm64/kernel/machine_kexec.c | 3 - arch/arm64/kvm/vgic/vgic-its.c | 4 + arch/arm64/kvm/vgic/vgic-mmio-v2.c | 2 +- arch/arm64/kvm/vgic/vgic-mmio-v3.c | 2 +- arch/arm64/mm/mmu.c | 4 +- arch/arm64/net/bpf_jit_comp.c | 4 +- arch/loongarch/kernel/cpu-probe.c | 7 + arch/loongarch/mm/init.c | 4 - arch/loongarch/pci/acpi.c | 5 + arch/loongarch/pci/pci.c | 3 + arch/parisc/kernel/syscalls/syscall.tbl | 2 +- arch/powerpc/kernel/time.c | 6 +- arch/powerpc/kexec/Makefile | 2 +- arch/powerpc/kexec/file_load_64.c | 2 +- arch/powerpc/platforms/44x/warp.c | 2 + arch/s390/kernel/debug.c | 8 + arch/s390/kvm/interrupt.c | 3 +- arch/s390/kvm/pci.c | 6 +- arch/um/drivers/cow_user.c | 8 +- arch/x86/events/intel/uncore_discovery.c | 2 +- arch/x86/include/asm/segment.h | 8 +- arch/x86/include/uapi/asm/kvm.h | 12 +- arch/x86/kvm/mmu/mmu.c | 36 +- arch/x86/kvm/mmu/spte.h | 5 + arch/x86/kvm/svm/nested.c | 38 +- arch/x86/kvm/svm/sev.c | 11 +- arch/x86/kvm/svm/svm.c | 13 + arch/x86/kvm/svm/svm.h | 1 + arch/x86/kvm/trace.h | 2 +- arch/x86/kvm/x86.c | 14 +- block/blk-cgroup.c | 15 + block/blk-mq.c | 10 +- certs/extract-cert.c | 6 +- crypto/af_alg.c | 2 + crypto/authencesn.c | 5 + crypto/pcrypt.c | 7 +- drivers/acpi/arm64/agdi.c | 2 +- drivers/acpi/cppc_acpi.c | 6 +- drivers/acpi/power.c | 2 +- drivers/acpi/scan.c | 2 +- drivers/acpi/video_detect.c | 8 + drivers/ata/ahci.c | 14 + drivers/base/core.c | 39 +- drivers/base/dd.c | 20 + drivers/base/devres.c | 2 + drivers/block/drbd/drbd_nl.c | 8 +- drivers/block/rbd.c | 6 +- drivers/block/ublk_drv.c | 28 +- drivers/bluetooth/btintel.c | 11 +- drivers/bluetooth/hci_ldisc.c | 51 +- drivers/bluetooth/virtio_bt.c | 39 +- drivers/bus/imx-weim.c | 2 +- drivers/cdrom/cdrom.c | 73 +- drivers/char/ipmi/ipmi_si_intf.c | 70 +- drivers/char/ipmi/ipmi_ssif.c | 23 +- drivers/char/tpm/tpm_tis_core.c | 4 + drivers/clk/clk-qoriq.c | 17 +- drivers/clk/clk-xgene.c | 2 + drivers/clk/imx/clk-imx6q.c | 12 +- drivers/clk/imx/clk-imx8mq.c | 4 +- drivers/clk/microchip/clk-mpfs-ccc.c | 6 +- drivers/clk/qcom/dispcc-sc7180.c | 8 + drivers/clk/qcom/dispcc-sm8250.c | 6 +- drivers/clk/qcom/dispcc-sm8450.c | 2 +- drivers/clk/qcom/gcc-sc8180x.c | 64 +- drivers/clk/visconti/pll.c | 2 +- drivers/cpuidle/cpuidle-powernv.c | 5 +- drivers/cpuidle/cpuidle-pseries.c | 5 +- drivers/crypto/atmel-aes.c | 2 +- drivers/crypto/atmel-ecc.c | 1 + drivers/crypto/atmel-sha204a.c | 6 +- drivers/crypto/atmel-tdes.c | 8 +- drivers/crypto/ccp/ccp-crypto-aes.c | 7 +- drivers/crypto/ccp/sev-dev.c | 19 +- drivers/crypto/ccree/cc_hash.c | 1 + drivers/crypto/hisilicon/sec/sec_algs.c | 2 +- drivers/crypto/sa2ul.c | 4 +- drivers/dma/dw-axi-dmac/dw-axi-dmac-platform.c | 2 - drivers/dma/idxd/sysfs.c | 1 - drivers/dma/mxs-dma.c | 1 + drivers/extcon/extcon-ptn5150.c | 14 + drivers/firmware/arm_ffa/bus.c | 4 +- drivers/firmware/arm_ffa/driver.c | 2 +- drivers/firmware/efi/capsule-loader.c | 2 +- drivers/firmware/google/framebuffer-coreboot.c | 2 +- drivers/firmware/imx/scu-pd.c | 1 + drivers/gpio/gpio-tegra.c | 2 +- drivers/gpio/gpiolib-cdev.c | 21 +- drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c | 43 +- drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c | 2 + drivers/gpu/drm/amd/amdgpu/amdgpu_gart.c | 13 +- drivers/gpu/drm/amd/amdgpu/amdgpu_gmc.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ring.h | 11 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c | 3 + drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c | 3 + drivers/gpu/drm/amd/amdgpu/gfx_v10_0.c | 2 +- drivers/gpu/drm/amd/amdgpu/gfx_v11_0.c | 2 - drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c | 66 ++ drivers/gpu/drm/amd/amdgpu/gfx_v9_0.c | 3 - drivers/gpu/drm/amd/amdgpu/sdma_v4_0.c | 4 +- drivers/gpu/drm/amd/amdgpu/uvd_v3_1.c | 16 +- drivers/gpu/drm/amd/amdgpu/uvd_v4_2.c | 3 +- drivers/gpu/drm/amd/amdgpu/vce_v2_0.c | 2 +- drivers/gpu/drm/amd/amdgpu/vcn_v3_0.c | 25 +- drivers/gpu/drm/amd/amdgpu/vcn_v4_0.c | 23 +- drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 26 +- drivers/gpu/drm/amd/amdkfd/kfd_priv.h | 3 + drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 5 + drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.h | 1 + .../amd/display/amdgpu_dm/amdgpu_dm_mst_types.c | 7 +- drivers/gpu/drm/amd/display/dc/bios/bios_parser.c | 62 ++ drivers/gpu/drm/amd/display/dc/bios/bios_parser2.c | 9 + .../drm/amd/display/dc/bios/bios_parser_helper.c | 9 +- drivers/gpu/drm/amd/display/dc/core/dc.c | 6 +- .../gpu/drm/amd/display/dc/dce/dce_link_encoder.c | 4 +- .../amd/display/include/grph_object_ctrl_defs.h | 4 + drivers/gpu/drm/amd/pm/powerplay/hwmgr/hwmgr.c | 15 + .../gpu/drm/amd/pm/powerplay/hwmgr/smu7_hwmgr.c | 118 +++- .../gpu/drm/amd/pm/powerplay/hwmgr/smu7_hwmgr.h | 1 + drivers/gpu/drm/amd/pm/powerplay/inc/hwmgr.h | 1 + .../gpu/drm/amd/pm/powerplay/smumgr/ci_smumgr.c | 28 +- .../drm/arm/display/komeda/komeda_framebuffer.c | 6 +- drivers/gpu/drm/bridge/chipone-icn6211.c | 4 +- drivers/gpu/drm/bridge/ite-it66121.c | 5 + .../drm/bridge/megachips-stdpxxxx-ge-b850v3-fw.c | 16 +- drivers/gpu/drm/drm_file.c | 5 +- drivers/gpu/drm/drm_gem_framebuffer_helper.c | 4 +- drivers/gpu/drm/drm_mode_config.c | 9 +- drivers/gpu/drm/gma500/oaktrail_hdmi.c | 1 + drivers/gpu/drm/gma500/oaktrail_lvds.c | 9 +- drivers/gpu/drm/i915/display/intel_dp.c | 9 +- drivers/gpu/drm/i915/display/intel_psr.c | 18 +- drivers/gpu/drm/i915/display/skl_watermark.c | 43 +- drivers/gpu/drm/i915/display/skl_watermark.h | 2 +- drivers/gpu/drm/i915/gt/intel_reset.c | 3 +- drivers/gpu/drm/msm/adreno/a6xx_gpu_state.c | 2 +- drivers/gpu/drm/msm/adreno/a6xx_hfi.c | 14 +- drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c | 2 - drivers/gpu/drm/msm/disp/msm_disp_snapshot_util.c | 24 +- drivers/gpu/drm/msm/dsi/dsi_cfg.c | 4 +- drivers/gpu/drm/msm/dsi/dsi_cfg.h | 2 +- drivers/gpu/drm/msm/dsi/dsi_host.c | 1 + drivers/gpu/drm/msm/msm_gem_shrinker.c | 5 +- drivers/gpu/drm/msm/msm_iommu.c | 5 +- drivers/gpu/drm/nouveau/nouveau_gem.c | 2 +- drivers/gpu/drm/panel/panel-simple.c | 2 +- drivers/gpu/drm/panfrost/panfrost_drv.c | 2 + drivers/gpu/drm/radeon/ci_dpm.c | 9 +- drivers/gpu/drm/sun4i/sun4i_backend.c | 6 +- drivers/gpu/drm/tiny/arcpgu.c | 3 +- drivers/gpu/drm/vc4/vc4_bo.c | 3 + drivers/gpu/drm/vc4/vc4_gem.c | 19 +- drivers/gpu/drm/vc4/vc4_hdmi.c | 14 +- drivers/gpu/drm/vc4/vc4_v3d.c | 1 + drivers/gpu/drm/virtio/virtgpu_drv.h | 1 + drivers/gpu/drm/virtio/virtgpu_gem.c | 17 + drivers/gpu/drm/virtio/virtgpu_plane.c | 10 +- drivers/hid/hid-alps.c | 3 + drivers/hid/hid-asus.c | 28 +- drivers/hid/hid-core.c | 3 + drivers/hid/hid-ids.h | 3 + drivers/hid/hid-quirks.c | 3 +- drivers/hid/hid-roccat.c | 2 + drivers/hid/hid-uclogic-core.c | 4 +- drivers/hid/usbhid/hid-core.c | 2 +- drivers/hwmon/corsair-psu.c | 4 +- drivers/hwmon/ltc2992.c | 41 +- drivers/hwmon/pmbus/adm1266.c | 32 +- drivers/i2c/busses/i2c-s3c2410.c | 7 +- drivers/i2c/i2c-core-of.c | 2 +- drivers/i3c/master/mipi-i3c-hci/dma.c | 30 +- drivers/iio/adc/ad7768-1.c | 9 +- drivers/iio/adc/ti-ads7950.c | 11 +- drivers/infiniband/core/addr.c | 3 + drivers/infiniband/core/iwpm_msg.c | 6 +- drivers/infiniband/hw/hns/hns_roce_qp.c | 7 + drivers/infiniband/hw/mlx4/srq.c | 4 +- drivers/infiniband/hw/ocrdma/ocrdma_verbs.c | 4 +- drivers/infiniband/hw/vmw_pvrdma/pvrdma_verbs.c | 2 +- drivers/infiniband/sw/rxe/rxe_recv.c | 14 +- drivers/infiniband/sw/siw/siw_qp_rx.c | 15 + drivers/infiniband/ulp/rtrs/rtrs-srv-sysfs.c | 2 +- drivers/iommu/intel/iommu.c | 3 + drivers/irqchip/irq-ath79-cpu.c | 7 - drivers/irqchip/irq-pic32-evic.c | 2 +- drivers/leds/blink/leds-lgm-sso.c | 2 - drivers/mailbox/mailbox-test.c | 39 +- drivers/mailbox/mailbox.c | 3 +- drivers/md/bcache/super.c | 8 + drivers/md/dm-cache-metadata.c | 24 +- drivers/md/dm-cache-metadata.h | 5 - drivers/md/dm-cache-policy-smq.c | 4 + drivers/md/dm-cache-target.c | 143 +++- drivers/md/dm-init.c | 4 +- drivers/md/dm-ioctl.c | 6 +- drivers/md/dm-log.c | 6 +- drivers/md/dm-raid1.c | 6 +- drivers/md/dm-verity-fec.c | 8 +- drivers/md/persistent-data/dm-btree-remove.c | 8 + drivers/md/raid10.c | 6 +- drivers/md/raid5-cache.c | 48 +- drivers/md/raid5.c | 8 +- drivers/media/dvb-frontends/dib8000.c | 4 +- drivers/media/i2c/imx219.c | 3 + drivers/media/i2c/imx412.c | 2 +- drivers/media/i2c/ov08d10.c | 10 +- drivers/media/i2c/ov8856.c | 10 +- drivers/media/pci/saa7164/saa7164-core.c | 47 +- drivers/media/pci/zoran/zoran_card.c | 2 +- drivers/media/platform/amphion/vpu_v4l2.c | 9 +- drivers/media/platform/ti/omap3isp/ispvideo.c | 1 + drivers/media/rc/streamzap.c | 12 +- drivers/media/rc/xbox_remote.c | 9 +- drivers/media/test-drivers/vidtv/vidtv_bridge.c | 4 +- drivers/media/test-drivers/vidtv/vidtv_channel.c | 4 + drivers/media/test-drivers/vidtv/vidtv_mux.c | 4 +- drivers/media/test-drivers/vidtv/vidtv_ts.c | 48 +- drivers/media/test-drivers/vidtv/vidtv_ts.h | 4 +- drivers/media/usb/as102/as102_usb_drv.c | 2 + drivers/media/usb/em28xx/em28xx-video.c | 14 +- drivers/media/usb/hackrf/hackrf.c | 7 +- drivers/media/usb/uvc/uvc_queue.c | 3 +- drivers/memory/tegra/tegra124-emc.c | 2 +- drivers/memory/tegra/tegra30-emc.c | 6 +- drivers/mfd/mc13xxx-core.c | 2 +- drivers/misc/ibmasm/ibmasmfs.c | 7 + drivers/misc/ibmasm/lowlevel.c | 12 +- drivers/misc/ibmasm/remote.c | 5 + drivers/mmc/core/block.c | 12 +- drivers/mmc/core/queue.h | 3 + drivers/mmc/host/sdhci-of-dwcmshc.c | 19 +- drivers/mtd/devices/docg3.c | 8 +- drivers/mtd/maps/physmap-gemini.c | 2 +- drivers/mtd/nand/raw/sunxi_nand.c | 6 +- drivers/mtd/parsers/ofpart_core.c | 4 +- drivers/mtd/spi-nor/core.c | 2 +- drivers/mtd/spi-nor/core.h | 10 +- drivers/mtd/spi-nor/micron-st.c | 4 +- drivers/mtd/spi-nor/sfdp.c | 47 +- drivers/mtd/spi-nor/spansion.c | 106 ++- drivers/mtd/spi-nor/sst.c | 50 +- drivers/mtd/spi-nor/swp.c | 4 +- drivers/net/bareudp.c | 24 +- drivers/net/bonding/bond_3ad.c | 123 ++-- drivers/net/bonding/bond_main.c | 90 ++- drivers/net/bonding/bond_netlink.c | 37 +- drivers/net/bonding/bond_options.c | 74 +++ drivers/net/bonding/bond_procfs.c | 3 +- drivers/net/bonding/bond_sysfs_slave.c | 17 +- drivers/net/can/spi/mcp251x.c | 29 +- drivers/net/can/usb/ucan.c | 2 +- drivers/net/dsa/mt7530.c | 85 +-- drivers/net/dsa/mt7530.h | 70 +- drivers/net/dsa/realtek/rtl8365mb.c | 2 +- .../net/ethernet/aquantia/atlantic/aq_pci_func.c | 2 +- drivers/net/ethernet/atheros/ag71xx.c | 3 + drivers/net/ethernet/broadcom/genet/bcmgenet.c | 733 +++++++++------------ drivers/net/ethernet/broadcom/genet/bcmgenet.h | 68 +- drivers/net/ethernet/broadcom/genet/bcmgenet_wol.c | 4 +- drivers/net/ethernet/broadcom/genet/bcmmii.c | 6 +- drivers/net/ethernet/cirrus/cs89x0.c | 2 - drivers/net/ethernet/cortina/gemini.c | 21 +- drivers/net/ethernet/freescale/Makefile | 3 +- drivers/net/ethernet/freescale/dpaa2/Kconfig | 4 + drivers/net/ethernet/freescale/enetc/enetc.c | 25 +- drivers/net/ethernet/ibm/ibmveth.c | 22 + drivers/net/ethernet/ibm/ibmveth.h | 1 + drivers/net/ethernet/intel/e1000/e1000_ethtool.c | 8 +- drivers/net/ethernet/intel/e1000e/netdev.c | 1 + drivers/net/ethernet/intel/i40e/i40e.h | 1 + drivers/net/ethernet/intel/i40e/i40e_main.c | 2 +- drivers/net/ethernet/intel/i40e/i40e_ptp.c | 3 +- drivers/net/ethernet/intel/iavf/iavf.h | 9 +- drivers/net/ethernet/intel/iavf/iavf_main.c | 52 +- drivers/net/ethernet/intel/iavf/iavf_virtchnl.c | 76 +-- drivers/net/ethernet/intel/ice/ice_dcb_lib.c | 4 +- drivers/net/ethernet/intel/ice/ice_ethtool.c | 11 +- drivers/net/ethernet/intel/ice/ice_main.c | 2 +- drivers/net/ethernet/intel/ice/ice_sriov.c | 2 - drivers/net/ethernet/intel/ice/ice_vf_lib.c | 26 +- drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c | 1 + drivers/net/ethernet/intel/ixgbevf/vf.c | 7 + drivers/net/ethernet/micrel/ks8851.h | 6 +- drivers/net/ethernet/micrel/ks8851_common.c | 69 +- drivers/net/ethernet/micrel/ks8851_par.c | 15 +- drivers/net/ethernet/micrel/ks8851_spi.c | 11 +- .../net/ethernet/microchip/lan966x/lan966x_main.c | 8 +- drivers/net/ethernet/microsoft/mana/hw_channel.c | 35 +- .../ethernet/netronome/nfp/nfpcore/nfp_target.c | 17 +- drivers/net/ethernet/qlogic/qed/qed_cxt.c | 2 + drivers/net/ethernet/xscale/ixp4xx_eth.c | 60 +- drivers/net/ethernet/xscale/ptp_ixp46x.c | 3 - drivers/net/hamradio/6pack.c | 39 +- drivers/net/ifb.c | 11 +- drivers/net/macvlan.c | 8 +- drivers/net/mctp/mctp-i2c.c | 4 +- drivers/net/netconsole.c | 26 +- drivers/net/netdevsim/dev.c | 2 +- drivers/net/phy/dp83869.c | 13 +- drivers/net/phy/mdio_bus.c | 4 +- drivers/net/ppp/ppp_generic.c | 5 +- drivers/net/ppp/pppoe.c | 8 +- drivers/net/slip/slhc.c | 49 +- drivers/net/usb/cdc-phonet.c | 7 +- drivers/net/usb/r8152.c | 2 +- drivers/net/usb/rtl8150.c | 12 +- drivers/net/vrf.c | 15 +- drivers/net/wan/lapbether.c | 13 +- drivers/net/wireless/ath/ath11k/ahb.c | 44 +- drivers/net/wireless/ath/ath11k/ce.h | 16 + drivers/net/wireless/ath/ath11k/core.c | 91 +++ drivers/net/wireless/ath/ath11k/core.h | 12 + drivers/net/wireless/ath/ath11k/dp_rx.c | 3 +- drivers/net/wireless/ath/ath11k/hal.c | 31 +- drivers/net/wireless/ath/ath11k/hal.h | 5 + drivers/net/wireless/ath/ath11k/hal_rx.c | 13 +- drivers/net/wireless/ath/ath11k/hal_rx.h | 18 +- drivers/net/wireless/ath/ath11k/hw.c | 398 ++++++++++- drivers/net/wireless/ath/ath11k/hw.h | 14 +- drivers/net/wireless/ath/ath11k/mac.c | 7 + drivers/net/wireless/ath/ath11k/pci.c | 2 + drivers/net/wireless/ath/ath11k/wmi.c | 19 +- drivers/net/wireless/ath/ath5k/base.c | 3 +- drivers/net/wireless/ath/ath9k/channel.c | 6 +- drivers/net/wireless/broadcom/b43/xmit.c | 3 +- drivers/net/wireless/broadcom/b43legacy/xmit.c | 3 +- .../wireless/broadcom/brcm80211/brcmfmac/chip.c | 15 + .../wireless/broadcom/brcm80211/brcmfmac/fweh.c | 5 + drivers/net/wireless/intel/iwlwifi/queue/tx.c | 3 +- drivers/net/wireless/mac80211_hwsim.c | 1 - drivers/net/wireless/marvell/mwifiex/11n_aggr.c | 1 + drivers/net/wireless/mediatek/mt76/mt7921/mcu.c | 3 + drivers/net/wireless/realtek/rtlwifi/pci.c | 1 + drivers/net/wireless/realtek/rtw88/pci.c | 3 +- drivers/net/wireless/realtek/rtw89/phy.c | 2 +- drivers/net/wireless/rsi/rsi_common.h | 5 +- drivers/net/wireless/ti/wl1251/tx.c | 8 +- drivers/net/wwan/iosm/iosm_ipc_imem.c | 2 + drivers/nfc/s3fwrn5/uart.c | 10 +- drivers/nfc/trf7970a.c | 3 +- drivers/nvme/host/apple.c | 6 +- drivers/nvme/host/core.c | 2 +- drivers/nvme/host/pci.c | 3 + drivers/nvme/target/core.c | 2 +- drivers/nvme/target/tcp.c | 51 +- drivers/of/base.c | 2 +- drivers/of/dynamic.c | 2 +- drivers/of/platform.c | 2 +- drivers/parisc/lasi.c | 12 +- drivers/pci/controller/dwc/pcie-tegra194.c | 151 ++--- drivers/pci/controller/pci-hyperv.c | 8 + drivers/pci/controller/pcie-mediatek-gen3.c | 8 +- drivers/pci/endpoint/functions/pci-epf-ntb.c | 56 +- drivers/pci/endpoint/functions/pci-epf-vntb.c | 19 +- drivers/pci/pci.c | 48 +- drivers/pci/pci.h | 6 + drivers/pci/pcie/aer.c | 2 - drivers/pcmcia/rsrc_nonstatic.c | 6 +- drivers/phy/marvell/phy-mvebu-a3700-utmi.c | 5 +- drivers/pinctrl/intel/pinctrl-intel.c | 2 +- drivers/pinctrl/nomadik/pinctrl-abx500.c | 2 +- drivers/pinctrl/pinctrl-cy8c95x0.c | 27 +- drivers/pinctrl/pinctrl-pic32.c | 20 +- drivers/pinctrl/qcom/pinctrl-sm8150.c | 8 +- drivers/platform/surface/surfacepro3_button.c | 1 + drivers/platform/x86/adv_swbutton.c | 6 +- .../x86/dell/dell-wmi-sysman/enum-attributes.c | 34 +- drivers/platform/x86/dell/dell_rbu.c | 6 +- drivers/platform/x86/hp/hp-wmi.c | 5 + drivers/platform/x86/hp/hp_accel.c | 3 + drivers/platform/x86/intel/hid.c | 6 +- drivers/platform/x86/intel/vbtn.c | 6 +- drivers/platform/x86/panasonic-laptop.c | 5 +- drivers/power/supply/axp288_charger.c | 19 +- drivers/power/supply/max17042_battery.c | 2 +- drivers/pwm/pwm-imx-tpm.c | 8 + drivers/regulator/act8945a-regulator.c | 3 +- drivers/regulator/bd9571mwv-regulator.c | 3 +- drivers/regulator/max77650-regulator.c | 2 +- drivers/rtc/rtc-abx80x.c | 2 + drivers/rtc/rtc-ntxec.c | 2 +- drivers/s390/cio/css.c | 2 +- drivers/scsi/isci/host.c | 3 + drivers/scsi/sd.c | 1 + drivers/scsi/sg.c | 29 +- drivers/scsi/sr.c | 11 +- drivers/scsi/sr.h | 1 - drivers/soc/aspeed/aspeed-socinfo.c | 2 +- drivers/soc/qcom/llcc-qcom.c | 2 +- drivers/soc/qcom/ocmem.c | 22 +- drivers/soc/qcom/qcom_aoss.c | 2 +- drivers/soc/tegra/cbb/tegra234-cbb.c | 4 + drivers/soc/ti/omap_prm.c | 1 + drivers/soundwire/bus.c | 8 +- drivers/spi/spi-fsl-qspi.c | 3 +- drivers/spi/spi-hisi-kunpeng.c | 12 +- drivers/spi/spi-imx.c | 1 + drivers/spi/spi-meson-spicc.c | 2 - drivers/spi/spi-mpc52xx.c | 3 +- drivers/spi/spi-mtk-nor.c | 4 +- drivers/spi/spi-mtk-snfi.c | 16 +- drivers/spi/spi-orion.c | 6 + drivers/spi/spi-rockchip.c | 66 +- drivers/spi/spi-sprd.c | 3 +- drivers/spi/spi-ti-qspi.c | 1 + drivers/spi/spi-topcliff-pch.c | 6 +- drivers/spi/spi-zynqmp-gqspi.c | 4 +- drivers/spi/spi.c | 2 +- drivers/staging/media/atomisp/pci/atomisp_ioctl.c | 4 + drivers/staging/media/rkvdec/rkvdec-vp9.c | 3 +- drivers/staging/rtl8723bs/core/rtw_security.c | 2 +- drivers/staging/sm750fb/sm750.c | 3 + drivers/staging/vme_user/vme_fake.c | 2 + drivers/target/target_core_configfs.c | 2 +- drivers/target/target_core_sbc.c | 3 +- drivers/thermal/spear_thermal.c | 2 +- drivers/thermal/sprd_thermal.c | 4 +- drivers/tty/hvc/hvc_iucv.c | 2 +- drivers/ufs/core/ufshcd.c | 31 +- drivers/ufs/host/ufshcd-pci.c | 2 - drivers/ufs/host/ufshcd-pltfrm.c | 25 +- drivers/usb/class/cdc-acm.c | 53 +- drivers/usb/class/usblp.c | 3 +- drivers/usb/common/ulpi.c | 5 +- drivers/usb/core/port.c | 1 + drivers/usb/gadget/function/f_ncm.c | 4 +- drivers/usb/gadget/function/f_phonet.c | 9 + drivers/usb/gadget/udc/omap_udc.c | 4 - drivers/usb/gadget/udc/renesas_usb3.c | 7 +- drivers/usb/host/xhci.c | 1 - drivers/usb/serial/option.c | 6 + drivers/usb/storage/unusual_devs.h | 7 +- drivers/usb/usbip/usbip_common.c | 12 + drivers/vhost/net.c | 4 +- drivers/video/backlight/sky81452-backlight.c | 3 + drivers/video/fbdev/matrox/g450_pll.c | 2 +- drivers/video/fbdev/offb.c | 7 +- drivers/video/fbdev/tdfxfb.c | 3 + drivers/video/fbdev/udlfb.c | 34 +- fs/adfs/super.c | 3 + fs/binfmt_elf.c | 2 +- fs/btrfs/inode.c | 2 +- fs/btrfs/space-info.c | 2 +- fs/ceph/xattr.c | 1 + fs/dcache.c | 4 +- fs/debugfs/file.c | 5 +- fs/erofs/dir.c | 28 +- fs/eventpoll.c | 201 ++++-- fs/ext2/inode.c | 14 +- fs/ext4/extents.c | 15 + fs/ext4/xattr.c | 4 +- fs/f2fs/compress.c | 90 +-- fs/f2fs/data.c | 28 +- fs/f2fs/f2fs.h | 2 + fs/f2fs/inode.c | 2 +- fs/f2fs/node.c | 17 +- fs/f2fs/super.c | 8 +- fs/f2fs/sysfs.c | 52 +- fs/fuse/control.c | 4 +- fs/fuse/readdir.c | 4 + fs/gfs2/dir.c | 37 +- fs/gfs2/glops.c | 40 +- fs/gfs2/inode.c | 3 +- fs/gfs2/log.c | 33 +- fs/gfs2/xattr.c | 28 +- fs/isofs/export.c | 2 +- fs/isofs/rock.c | 9 + fs/nfs/blocklayout/blocklayout.c | 4 +- fs/nilfs2/dat.c | 3 + fs/nilfs2/ioctl.c | 6 + fs/notify/fsnotify.c | 2 +- fs/notify/inotify/inotify_user.c | 1 + fs/notify/mark.c | 18 +- fs/ntfs3/fslog.c | 12 +- fs/ntfs3/run.c | 18 +- fs/ntfs3/super.c | 7 +- fs/ocfs2/aops.c | 75 ++- fs/ocfs2/dlm/dlmdomain.c | 10 +- fs/ocfs2/inode.c | 31 + fs/ocfs2/ioctl.c | 18 +- fs/ocfs2/mmap.c | 7 +- fs/ocfs2/ocfs2_trace.h | 10 +- fs/ocfs2/resize.c | 22 +- fs/ocfs2/xattr.c | 4 +- fs/omfs/inode.c | 6 + fs/pstore/ram_core.c | 4 + fs/quota/dquot.c | 38 +- fs/smb/client/cached_dir.c | 8 + fs/smb/client/cifs_spnego.c | 16 + fs/smb/client/cifsacl.c | 1 + fs/smb/client/cifsfs.c | 2 + fs/smb/client/fs_context.c | 4 + fs/smb/client/smb2file.c | 27 +- fs/smb/client/smb2misc.c | 3 +- fs/smb/client/smb2ops.c | 17 + fs/smb/client/smb2pdu.h | 2 +- fs/smb/server/auth.c | 11 +- fs/smb/server/mgmt/user_session.c | 12 +- fs/smb/server/smb2pdu.c | 7 + fs/smb/server/smbacl.c | 19 +- fs/smb/server/transport_tcp.c | 4 +- fs/sysfs/group.c | 2 +- fs/udf/misc.c | 8 +- fs/userfaultfd.c | 2 - include/dt-bindings/clock/qcom,dispcc-sc7180.h | 7 +- include/dt-bindings/clock/qcom,gcc-sc8180x.h | 5 + include/linux/cdrom.h | 1 + include/linux/container_of.h | 23 +- include/linux/cpuhotplug.h | 1 - include/linux/dev_printk.h | 10 + include/linux/device.h | 48 +- include/linux/dmi.h | 5 + include/linux/f2fs_fs.h | 1 + include/linux/fsnotify_backend.h | 1 + include/linux/fwnode.h | 45 +- include/linux/kvm_host.h | 3 +- include/linux/module.h | 2 + include/linux/moduleparam.h | 11 +- include/linux/netfilter/x_tables.h | 3 +- include/linux/netfilter_arp/arp_tables.h | 1 - include/linux/netfilter_ipv4/ip_tables.h | 1 - include/linux/netfilter_ipv6/ip6_tables.h | 1 - include/linux/padata.h | 12 +- include/linux/ppp_defs.h | 16 + include/linux/printk.h | 5 +- include/linux/quotaops.h | 9 +- include/linux/randomize_kstack.h | 26 +- include/linux/sched.h | 4 + include/linux/soc/qcom/apr.h | 2 +- include/linux/spinlock_up.h | 20 +- include/linux/string.h | 12 + include/linux/tcp.h | 10 +- include/linux/tpm_eventlog.h | 9 +- include/linux/usb.h | 3 +- include/net/bluetooth/hci_sync.h | 17 + include/net/bond_3ad.h | 3 +- include/net/bond_options.h | 2 + include/net/bonding.h | 4 + include/net/ipv6.h | 6 - include/net/mac80211.h | 4 + include/net/netfilter/nf_queue.h | 1 + include/net/netfilter/nf_tables.h | 2 + include/net/pie.h | 2 +- include/net/pkt_cls.h | 2 + include/net/route.h | 6 - include/net/tcp.h | 2 +- include/net/udp_tunnel.h | 15 + include/trace/events/btrfs.h | 9 +- include/trace/events/rxrpc.h | 4 + include/trace/events/timer.h | 11 +- include/uapi/linux/bpf.h | 2 + include/uapi/linux/if_link.h | 3 + include/uapi/linux/kvm.h | 11 +- include/ufs/ufshcd.h | 1 - include/video/udlfb.h | 1 + init/main.c | 1 - io_uring/io-wq.c | 3 +- io_uring/io_uring.c | 2 + io_uring/poll.c | 14 +- io_uring/timeout.c | 4 + kernel/audit.c | 4 + kernel/auditsc.c | 2 +- kernel/bpf/bpf_lsm.c | 1 - kernel/bpf/devmap.c | 8 +- kernel/bpf/helpers.c | 17 +- kernel/bpf/local_storage.c | 2 +- kernel/cgroup/rdma.c | 2 +- kernel/exit.c | 3 +- kernel/fork.c | 13 +- kernel/futex/requeue.c | 13 +- kernel/irq_work.c | 7 + kernel/locking/rtmutex.c | 13 +- kernel/module/main.c | 4 +- kernel/padata.c | 266 +++----- kernel/params.c | 46 +- kernel/regset.c | 6 +- kernel/taskstats.c | 1 + kernel/time/hrtimer.c | 56 +- kernel/trace/ring_buffer.c | 8 +- kernel/trace/trace_branch.c | 8 +- kernel/trace/trace_events_hist.c | 12 +- kernel/trace/trace_probe.c | 2 +- kernel/trace/tracing_map.c | 17 +- lib/kunit/Kconfig | 5 +- lib/ts_kmp.c | 18 +- mm/backing-dev.c | 5 +- mm/kasan/init.c | 8 +- net/batman-adv/bat_iv_ogm.c | 85 ++- net/batman-adv/bridge_loop_avoidance.c | 65 +- net/batman-adv/distributed-arp-table.c | 3 + net/batman-adv/fragmentation.c | 58 +- net/batman-adv/gateway_client.c | 4 + net/batman-adv/originator.c | 4 +- net/batman-adv/tp_meter.c | 32 +- net/batman-adv/types.h | 6 +- net/bluetooth/af_bluetooth.c | 10 + net/bluetooth/bnep/core.c | 2 +- net/bluetooth/hci_event.c | 21 +- net/bluetooth/hci_request.h | 21 - net/bluetooth/hci_sync.c | 14 +- net/bluetooth/iso.c | 14 +- net/bluetooth/l2cap_core.c | 8 +- net/bluetooth/l2cap_sock.c | 60 +- net/bluetooth/mgmt.c | 6 + net/bluetooth/rfcomm/sock.c | 9 +- net/bluetooth/sco.c | 9 +- net/bpf/test_run.c | 63 +- net/bridge/br_multicast.c | 27 +- net/bridge/netfilter/Kconfig | 13 + net/bridge/netfilter/Makefile | 2 +- net/bridge/netfilter/ebtable_broute.c | 14 +- net/bridge/netfilter/ebtable_filter.c | 14 +- net/bridge/netfilter/ebtable_nat.c | 12 +- net/bridge/netfilter/ebtables.c | 71 +- net/caif/cfsrvl.c | 14 +- net/can/raw.c | 11 +- net/ceph/auth.c | 4 +- net/ceph/crush/crush.c | 6 +- net/ceph/mon_client.c | 2 + net/ceph/osdmap.c | 14 +- net/core/filter.c | 4 +- net/core/flow_dissector.c | 13 +- net/core/neighbour.c | 34 +- net/core/net-procfs.c | 49 +- net/core/rtnetlink.c | 1 + net/dsa/dsa2.c | 38 +- net/ethtool/bitset.c | 8 +- net/ipv4/icmp.c | 15 +- net/ipv4/inet_connection_sock.c | 5 +- net/ipv4/netfilter/Kconfig | 59 +- net/ipv4/netfilter/Makefile | 2 +- net/ipv4/netfilter/arp_tables.c | 36 +- net/ipv4/netfilter/arpt_mangle.c | 8 + net/ipv4/netfilter/arptable_filter.c | 27 +- net/ipv4/netfilter/ip_tables.c | 18 +- net/ipv4/netfilter/iptable_filter.c | 27 +- net/ipv4/netfilter/iptable_mangle.c | 29 +- net/ipv4/netfilter/iptable_nat.c | 6 +- net/ipv4/netfilter/iptable_raw.c | 26 +- net/ipv4/netfilter/iptable_security.c | 27 +- net/ipv4/nexthop.c | 4 +- net/ipv4/raw.c | 2 +- net/ipv4/route.c | 48 -- net/ipv4/tcp.c | 17 +- net/ipv4/tcp_input.c | 6 +- net/ipv4/tcp_minisocks.c | 5 +- net/ipv4/tcp_output.c | 20 +- net/ipv4/tcp_recovery.c | 2 +- net/ipv4/udp_tunnel_core.c | 48 ++ net/ipv6/exthdrs.c | 13 +- net/ipv6/icmp.c | 10 +- net/ipv6/ip6_gre.c | 5 +- net/ipv6/ip6_output.c | 68 -- net/ipv6/ip6_udp_tunnel.c | 69 ++ net/ipv6/netfilter/Kconfig | 30 +- net/ipv6/netfilter/Makefile | 2 +- net/ipv6/netfilter/ip6_tables.c | 18 +- net/ipv6/netfilter/ip6t_eui64.c | 3 +- net/ipv6/netfilter/ip6t_hbh.c | 4 + net/ipv6/netfilter/ip6table_filter.c | 26 +- net/ipv6/netfilter/ip6table_mangle.c | 27 +- net/ipv6/netfilter/ip6table_nat.c | 6 +- net/ipv6/netfilter/ip6table_raw.c | 24 +- net/ipv6/netfilter/ip6table_security.c | 27 +- net/ipv6/rpl_iptunnel.c | 9 + net/ipv6/seg6_hmac.c | 2 + net/ipv6/seg6_iptunnel.c | 12 +- net/ipv6/xfrm6_protocol.c | 4 +- net/l2tp/l2tp_core.c | 5 + net/mac80211/tdls.c | 2 +- net/mac80211/tx.c | 4 +- net/mptcp/sockopt.c | 12 +- net/mptcp/subflow.c | 4 +- net/netfilter/Kconfig | 22 +- net/netfilter/ipset/ip_set_hash_ipmark.c | 6 +- net/netfilter/ipset/ip_set_hash_ipport.c | 5 +- net/netfilter/ipset/ip_set_hash_ipportip.c | 5 +- net/netfilter/ipset/ip_set_hash_ipportnet.c | 5 +- net/netfilter/ipvs/ip_vs_xmit.c | 19 +- net/netfilter/nf_conntrack_netlink.c | 2 +- net/netfilter/nf_conntrack_proto_sctp.c | 13 +- net/netfilter/nf_conntrack_sip.c | 160 +++-- net/netfilter/nf_nat_amanda.c | 2 +- net/netfilter/nf_nat_sip.c | 34 +- net/netfilter/nf_queue.c | 4 +- net/netfilter/nf_tables_api.c | 4 +- net/netfilter/nfnetlink_log.c | 8 +- net/netfilter/nfnetlink_osf.c | 45 +- net/netfilter/nfnetlink_queue.c | 2 + net/netfilter/nft_bitwise.c | 3 +- net/netfilter/nft_ct.c | 2 + net/netfilter/nft_dynset.c | 10 +- net/netfilter/nft_fwd_netdev.c | 10 + net/netfilter/nft_osf.c | 6 +- net/netfilter/nft_set_pipapo_avx2.c | 20 +- net/netfilter/x_tables.c | 116 +++- net/netfilter/xt_mac.c | 34 +- net/netfilter/xt_multiport.c | 34 +- net/netfilter/xt_owner.c | 37 +- net/netfilter/xt_physdev.c | 29 +- net/netfilter/xt_policy.c | 2 +- net/netfilter/xt_realm.c | 2 +- net/netfilter/xt_socket.c | 23 +- net/nfc/digital_technology.c | 6 + net/nfc/llcp_core.c | 2 + net/openvswitch/datapath.c | 35 +- net/openvswitch/vport-netdev.c | 6 +- net/openvswitch/vport.c | 3 + net/phonet/pep.c | 19 +- net/qrtr/ns.c | 11 + net/rds/af_rds.c | 10 +- net/rds/connection.c | 14 + net/rds/ib.c | 24 +- net/rds/ib.h | 1 + net/rds/ib_rdma.c | 2 +- net/rds/message.c | 21 +- net/rds/rdma.c | 4 - net/rxrpc/call_object.c | 22 +- net/rxrpc/conn_event.c | 17 +- net/rxrpc/key.c | 9 +- net/rxrpc/proc.c | 26 +- net/rxrpc/recvmsg.c | 22 +- net/rxrpc/rxkad.c | 7 +- net/rxrpc/sendmsg.c | 2 +- net/sched/act_csum.c | 6 +- net/sched/act_ct.c | 8 +- net/sched/em_cmp.c | 5 +- net/sched/em_nbyte.c | 2 + net/sched/em_text.c | 11 +- net/sched/sch_cake.c | 15 +- net/sched/sch_choke.c | 26 +- net/sched/sch_fq_codel.c | 3 +- net/sched/sch_fq_pie.c | 19 +- net/sched/sch_hhf.c | 19 +- net/sched/sch_netem.c | 44 +- net/sched/sch_pie.c | 52 +- net/sched/sch_red.c | 33 +- net/sched/sch_sfb.c | 54 +- net/sched/sch_taprio.c | 176 ++--- net/sctp/inqueue.c | 1 + net/sctp/sm_statefuns.c | 6 + net/sctp/socket.c | 11 +- net/smc/af_smc.c | 3 +- net/smc/smc_clc.c | 4 +- net/smc/smc_tracepoint.h | 2 +- net/strparser/strparser.c | 8 + net/tipc/msg.c | 14 +- net/tls/tls.h | 1 + net/tls/tls_strp.c | 6 + net/tls/tls_sw.c | 30 +- net/unix/af_unix.c | 9 +- net/unix/diag.c | 21 +- net/unix/unix_bpf.c | 3 + net/vmw_vsock/af_vsock.c | 6 +- net/vmw_vsock/hyperv_transport.c | 4 +- net/vmw_vsock/virtio_transport_common.c | 23 +- net/vmw_vsock/vmci_transport.c | 2 +- net/wireless/core.c | 4 +- net/wireless/scan.c | 3 + net/xdp/xdp_umem.c | 3 +- net/xfrm/xfrm_policy.c | 2 + net/xfrm/xfrm_user.c | 2 + scripts/checkpatch.pl | 10 + scripts/dtc/dtc-lexer.l | 3 - scripts/generate_rust_analyzer.py | 17 +- security/integrity/ima/ima_crypto.c | 2 +- security/keys/keyring.c | 1 + sound/aoa/soundbus/i2sbus/core.c | 9 +- sound/core/compress_offload.c | 7 - sound/core/control.c | 4 + sound/core/control_led.c | 14 +- sound/core/misc.c | 44 +- sound/core/seq/oss/seq_oss_rw.c | 6 +- sound/core/sound.c | 7 + sound/firewire/fireworks/fireworks_command.c | 5 +- sound/firewire/tascam/tascam-hwdep.c | 1 + sound/isa/sc6000.c | 285 ++++---- sound/pci/asihpi/hpicmn.c | 6 + sound/pci/asihpi/hpimsgx.c | 6 +- sound/pci/ctxfi/ctatc.c | 3 +- sound/pci/ctxfi/ctvmem.h | 2 +- sound/pci/hda/patch_conexant.c | 34 +- sound/pci/hda/patch_realtek.c | 8 +- sound/soc/amd/yc/acp6x-mach.c | 35 + sound/soc/codecs/ab8500-codec.c | 6 +- sound/soc/fsl/fsl_easrc.c | 125 +++- sound/soc/fsl/fsl_micfil.c | 28 +- sound/soc/fsl/fsl_xcvr.c | 22 +- sound/soc/intel/boards/bytcr_wm5102.c | 1 + sound/soc/qcom/qdsp6/q6apm-dai.c | 1 + sound/soc/qcom/qdsp6/q6apm-lpass-dais.c | 2 +- sound/soc/qcom/qdsp6/q6apm.c | 17 +- sound/soc/qcom/qdsp6/q6core.c | 4 +- sound/soc/qcom/qdsp6/topology.c | 8 +- sound/soc/soc-core.c | 1 + sound/soc/sof/amd/acp-common.c | 1 + sound/soc/sof/amd/acp-ipc.c | 34 +- sound/soc/sof/amd/acp.h | 7 +- sound/soc/sof/compress.c | 11 +- sound/soc/sof/intel/hda-ipc.c | 8 +- sound/soc/sof/intel/hda.h | 4 +- sound/soc/sof/ipc3-pcm.c | 3 +- sound/soc/sof/ipc3.c | 4 +- sound/soc/sof/mediatek/mt8186/mt8186.c | 2 +- sound/soc/sof/mediatek/mt8195/mt8195.c | 2 +- sound/soc/sof/ops.h | 8 +- sound/soc/sof/pcm.c | 2 + sound/soc/sof/sof-priv.h | 13 +- sound/soc/sof/stream-ipc.c | 57 +- sound/soc/sof/topology.c | 2 +- sound/soc/sti/uniperif_player.c | 9 +- sound/soc/stm/stm32_sai_sub.c | 3 + sound/usb/6fire/chip.c | 17 +- sound/usb/6fire/control.c | 10 +- sound/usb/caiaq/control.c | 52 +- sound/usb/caiaq/device.c | 39 +- sound/usb/caiaq/input.c | 2 +- sound/usb/endpoint.c | 6 +- sound/usb/format.c | 88 ++- sound/usb/midi.c | 21 +- sound/usb/misc/ua101.c | 12 +- sound/usb/mixer.c | 14 +- sound/usb/mixer_quirks.c | 12 +- sound/usb/mixer_scarlett2.c | 2 +- sound/usb/quirks.c | 4 +- sound/usb/stream.c | 62 +- sound/usb/stream.h | 3 +- tools/accounting/getdelays.c | 41 +- tools/accounting/procacct.c | 40 +- tools/include/uapi/linux/bpf.h | 2 + tools/lib/bpf/relo_core.c | 2 + tools/perf/util/branch.h | 3 + tools/perf/util/cs-etm-decoder/cs-etm-decoder.c | 51 +- tools/perf/util/expr.c | 3 +- tools/perf/util/util.h | 1 - tools/testing/ktest/ktest.pl | 37 +- tools/testing/selftests/bpf/prog_tests/snprintf.c | 3 +- tools/testing/selftests/cgroup/test_memcontrol.c | 11 +- .../testing/selftests/mqueue/{setting => settings} | 0 .../selftests/net/forwarding/bridge_vlan_mcast.sh | 1 + tools/testing/selftests/vm/migration.c | 3 +- virt/kvm/dirty_ring.c | 3 +- 867 files changed, 9112 insertions(+), 4400 deletions(-)